openwhisk-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Chetan Mehrotra <chetan.mehro...@gmail.com>
Subject Re: change the default action context to omit api key
Date Tue, 12 Mar 2019 13:50:05 GMT
We may need such a feature flag so created a PR 4334 for it.

Chetan Mehrotra


On Wed, Mar 6, 2019 at 10:47 PM Rodric Rabbah <rodric@gmail.com> wrote:

> There is a new comment on the issue related to this patch [1] which
> suggests a deployment time parameter for enabling the feature that
> restricts whisk API keys being available to all actions. I looked at the PR
> and think it can be done with some changes in the controller and the tests.
> We already have many deployment parameters and a pattern to replicate.
>
> It is worth adding this configuration parameter? I'd expect we'd remove it
> at some point since the more-secure-by-default makes more sense longer
> term.
>
> -r
>
> [1]
>
> https://github.com/apache/incubator-openwhisk/issues/4226#issuecomment-470112596
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message