From fc7a1e017525c14508e366593d9ace7b350104f7 Mon Sep 17 00:00:00 2001 From: Judith Malnick Date: Thu, 4 Apr 2019 16:58:57 -0700 Subject: [PATCH] [docs] security warning about Helm chart (#5561) * [docs] security warning about Helm chart Correct security warning about helm chart to caution about default Consul install. * clarify that k8s or consul should be secure --- website/source/docs/platform/k8s/helm.html.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/website/source/docs/platform/k8s/helm.html.md b/website/source/docs/platform/k8s/helm.html.md index 914f6557f7..b868224651 100644 --- a/website/source/docs/platform/k8s/helm.html.md +++ b/website/source/docs/platform/k8s/helm.html.md @@ -22,13 +22,14 @@ properly installed and configured with your Kubernetes cluster. may still change significantly over time. Please always run Helm with `--dry-run` before any install or upgrade to verify changes. -~> **Security Warning:** By default, the chart will install an insecure configuration -of Consul. This provides a less complicated out-of-box experience for new users, -but is not appropriate for a production setup. It is highly recommended to use -a properly secured Kubernetes cluster or make sure that you understand and enable -the [recommended security features](/docs/internals/security.html). Currently, -some of these features are not supported in the Helm chart and require additional -manual configuration. +~> **Security Warning:** By default, the chart will install an insecure +configuration of Consul. This provides a less complicated out-of-box experience +for new users, but is not appropriate for a production setup. Make sure that +your Kubernetes cluster is properly secured to prevent unwanted access to +Consul, or that you understand and enable the +[recommended Consul security features](/docs/internals/security.html). +Currently, some of these features are not supported in the Helm chart and +require additional manual configuration. ## Using the Helm Chart @@ -475,7 +476,7 @@ ui: connectInject: enabled: true - default: false + default: false namespaceSelector: "my-app" ```