2574
44%

Ran 18 Mar 2020 09:33AM UTC

Jobs 1

Files 9

Run time 2s

Badge

Embed ▾

Committed 18 Mar 2020 09:28AM UTC coverage: 22.401% (-0.07%) from 22.474%

Build # 2574

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

Use cryptographically secure password generation (#854)

The current password generation algorithm is extremely deterministic, due to being based on the standard random number generator with a deterministic seed based on the current Unix timestamp (in seconds).

This can lead to a number of security issues, including:

The same passwords being used in different Kubernetes clusters if the operator is deployed in parallel. (This issue was discovered because of four deployments having the same generated passwords due to automatically being deployed in parallel.)
The passwords being easily guessable based on the time the operator pod started when the database was created. (This would typically be present in logs, metrics, etc., that may typically be accessible to more people than should have database access.)
Fix this issue by replacing the current randomness source with crypto/rand, which should produce cryptographically secure random data that is virtually unguessable. This will avoid both of the above problems as each deployment will be guaranteed to have unique, indeterministic passwords.

Run Details

278 of 1241 relevant lines covered (22.4%)

1.68 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	2574.1	18 Mar 2020 09:33AM UTC	0	22.4	Travis Job 2574.1

Source Files on build 2574

Detailed source file information is not available for this build.

zalando / postgres-operator / 2574
44%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 2574

zalando / postgres-operator / 2574 44%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 2574

zalando / postgres-operator / 2574
44%

README BADGES
x