Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of docs: deprecate rsadecrypt into stable-website #18858

Merged

Conversation

hc-github-team-nomad-core
Copy link
Contributor

Backport

This PR is auto-generated from #18856 to be assessed for backporting due to the inclusion of the label backport/website.

The below text is copied from the body of the original PR.


rsadecrypt uses PKCS #1 v1.5 padding which has multiple known weaknesses. While it is possible to use safely in Nomad, we should not encourage our users to use bad cryptographic primitives.

If users want to decrypt secrets in jobspecs we should choose a cryptographic primitive designed for that purpose. rsadecrypt was inherited from Terraform which only implemented it to support decrypting Window's passwords on AWS EC2 instances:

hashicorp/terraform#16647

This is not something that should ever be done in a jobspec, therefore there's no reason for Nomad to support this HCL2 function.

Preview to save you a few clicks:
image


Overview of commits

@hc-github-team-nomad-core hc-github-team-nomad-core force-pushed the backport/docs-rsadeprecate/weekly-profound-lion branch from 6eccbba to 49d5779 Compare October 24, 2023 22:48
@vercel vercel bot temporarily deployed to Preview – nomad October 24, 2023 22:58 Inactive
@vercel vercel bot temporarily deployed to Preview – nomad-storybook-and-ui October 24, 2023 22:58 Inactive
@schmichael schmichael merged commit 3df14b8 into stable-website Oct 24, 2023
@schmichael schmichael deleted the backport/docs-rsadeprecate/weekly-profound-lion branch October 24, 2023 23:23
Copy link

github-actions bot commented Feb 7, 2025

I'm going to lock this pull request because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 7, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants