Community: Research and document password management for community groups

Created on 29 Jul 2019 · 18Comments · Source: kubernetes/community

need a doc that describes the process and what platforms need to have credentials shared

example: zoom admins need to share the main account info

kindocumentation lifecyclfrozen sicontributor-experience sirelease

Source

parispittman

Most helpful comment

@ameukam open source plan :)

EDIT: To follow up. There are a few other nuances with it that need to be sorted out. Will update this thread with more information.

mrbobbytables on 16 Oct 2020

👍2

All 18 comments

Interested in this as well for SIG Release assets.
I think @idvoretskyi mentioned CNCF has 1password?
/sig release

justaugustus on 30 Jul 2019

@justaugustus LastPass.

It could be requested via the CNCF ServiceDesk (see https://github.com/cncf/servicedesk/blob/master/README.md#how-do-i-file-a-ticket-with-the-service-desk).

idvoretskyi on 30 Jul 2019

Gotcha. Thanks Ihor!

justaugustus on 30 Jul 2019

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

fejta-bot on 28 Oct 2019

/remove-lifecycle stale

mrbobbytables on 28 Oct 2019

/assign

I'm going to document this CNCF-wide during the next few weeks, which will be applicable for Kubernetes (obviously) as well.

idvoretskyi on 9 Dec 2019

👍1

CNCF suggests using Keybase for credentials sharing - https://github.com/cncf/servicedesk/#how-do-i-share-credentials-passwords-or-other-confidential-information.

idvoretskyi on 13 Feb 2020

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

fejta-bot on 13 May 2020

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten

fejta-bot on 12 Jun 2020

/remove-lifecycle rotten

nikhita on 15 Jun 2020

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

fejta-bot on 13 Sep 2020

/remove-lifecycle stale

markyjackson-taulia on 13 Sep 2020

/lifecycle frozen
Still a good idea, just no bandwidth for it.

mrbobbytables on 13 Sep 2020

@mrbobbytables Should we open a PR on https://github.com/1Password/1password-teams-open-source for an open source plan or do we need to use a Business Trial Plan for 1password evaluation ?

ameukam on 16 Oct 2020

@ameukam open source plan :)

EDIT: To follow up. There are a few other nuances with it that need to be sorted out. Will update this thread with more information.

mrbobbytables on 16 Oct 2020

👍2

I'll endorse both 1Password (not OSS, but free to us) and Bitwarden (OSS) for PW-keeping from a user perspective. Both work well.

jberkus on 27 Jan 2021

-1 for Bitwarden unless we have enough people on the infra team that actually know MSSQL and/or we confirm that it works with a hosted version of MSSQL that we can pay for or get donated. I don't think we want to bite off running that ourselves unless we have more expertise in it than I would expect.