{"action":"created","issue":{"url":"https://api.github.com/repos/weaveworks/weave/issues/3446","repository_url":"https://api.github.com/repos/weaveworks/weave","labels_url":"https://api.github.com/repos/weaveworks/weave/issues/3446/labels{/name}","comments_url":"https://api.github.com/repos/weaveworks/weave/issues/3446/comments","events_url":"https://api.github.com/repos/weaveworks/weave/issues/3446/events","html_url":"https://github.com/weaveworks/weave/issues/3446","id":377855392,"node_id":"MDU6SXNzdWUzNzc4NTUzOTI=","number":3446,"title":"[docs] improve the k8s docs on encryption","user":{"login":"farcaller","id":693,"node_id":"MDQ6VXNlcjY5Mw==","avatar_url":"https://avatars2.githubusercontent.com/u/693?v=4","gravatar_id":"","url":"https://api.github.com/users/farcaller","html_url":"https://github.com/farcaller","followers_url":"https://api.github.com/users/farcaller/followers","following_url":"https://api.github.com/users/farcaller/following{/other_user}","gists_url":"https://api.github.com/users/farcaller/gists{/gist_id}","starred_url":"https://api.github.com/users/farcaller/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/farcaller/subscriptions","organizations_url":"https://api.github.com/users/farcaller/orgs","repos_url":"https://api.github.com/users/farcaller/repos","events_url":"https://api.github.com/users/farcaller/events{/privacy}","received_events_url":"https://api.github.com/users/farcaller/received_events","type":"User","site_admin":false},"labels":[{"id":219422901,"node_id":"MDU6TGFiZWwyMTk0MjI5MDE=","url":"https://api.github.com/repos/weaveworks/weave/labels/[component/docs]","name":"[component/docs]","color":"bfd4f2","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-11-06T13:50:57Z","updated_at":"2018-11-06T17:11:17Z","closed_at":null,"author_association":"NONE","body":"## What you expected to happen?\r\n\r\nThe [k8s docs](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/) briefly mention the `password-secret` but provide no explanation on what role it plays. If installed in a default manner, weavenet runs unencrypted and again, the consequences of that aren't immediately clear.\r\n\r\nI would suggest to improve the documentation to\r\n- clearly state that the default setup is not encrypted and explaining what that means, which attack scenarios weave is exposed to\r\n- clearly state how to secure weave net\r\n\r\nMost people tend to use the most simple configuration without bothering with options unless absolutely necessary. Being one of the major CNI plugins weavenet could do better in terms of explaining the security landscape of the default installation."},"comment":{"url":"https://api.github.com/repos/weaveworks/weave/issues/comments/436332046","html_url":"https://github.com/weaveworks/weave/issues/3446#issuecomment-436332046","issue_url":"https://api.github.com/repos/weaveworks/weave/issues/3446","id":436332046,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjMzMjA0Ng==","user":{"login":"bboreham","id":8125524,"node_id":"MDQ6VXNlcjgxMjU1MjQ=","avatar_url":"https://avatars2.githubusercontent.com/u/8125524?v=4","gravatar_id":"","url":"https://api.github.com/users/bboreham","html_url":"https://github.com/bboreham","followers_url":"https://api.github.com/users/bboreham/followers","following_url":"https://api.github.com/users/bboreham/following{/other_user}","gists_url":"https://api.github.com/users/bboreham/gists{/gist_id}","starred_url":"https://api.github.com/users/bboreham/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bboreham/subscriptions","organizations_url":"https://api.github.com/users/bboreham/orgs","repos_url":"https://api.github.com/users/bboreham/repos","events_url":"https://api.github.com/users/bboreham/events{/privacy}","received_events_url":"https://api.github.com/users/bboreham/received_events","type":"User","site_admin":false},"created_at":"2018-11-06T17:11:16Z","updated_at":"2018-11-06T17:11:16Z","author_association":"MEMBER","body":"Under https://github.com/weaveworks/weave/tree/master/site\r\n\r\nhttps://github.com/weaveworks/weave/blob/master/site/kubernetes/kube-addon.md\r\nhttps://github.com/weaveworks/weave/blob/master/site/tasks/manage/security-untrusted-networks.md"}}
{"actor":{"display_login":"bboreham"}}