# Hardcoded Passwords in Kubernetes config maps

**URL:** <https://community.jenkins.io/t/hardcoded-passwords-in-kubernetes-config-maps/509>\
**Category:** Ask a question\
**Tags:** question\
**Created:** [October 10, 2021, 3:45pm UTC](https://community.jenkins.io/t/hardcoded-passwords-in-kubernetes-config-maps/509 "2021-10-10T15:45:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![maikbrauer](https://avatars.discourse-cdn.com/v4/letter/m/54ee81/32.png) [@maikbrauer](https://community.jenkins.io/u/maikbrauer)\
**Post date:** [October 10, 2021, 3:45pm UTC](https://community.jenkins.io/t/hardcoded-passwords-in-kubernetes-config-maps/509/1 "2021-10-10T15:45:29Z")

</div>

While reviewing the config maps of the Jenkins Kubernetes service, it was found that passwords are hardcoded and stored in clear text inside the config map “jenkins-ci”.

Is there any plan to change that behavior that has an impact on security?

---

<div class="post-metadata">

**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\
**Post date:** [October 10, 2021, 4:15pm UTC](https://community.jenkins.io/t/hardcoded-passwords-in-kubernetes-config-maps/509/2 "2021-10-10T16:15:55Z")

</div>

What kubernetrs service?are you talking about the helm chart? The operator? So.ething else?

Can you find the hard coded value in [GitHub - jenkinsci/helm-charts: Jenkins community Helm charts](https://github.com/jenkinsci/helm-charts/)

---

<div class="post-metadata">

**Author:** ![olblak](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/olblak/32/3_2.png) [@olblak](https://community.jenkins.io/u/olblak)\
**Post date:** [October 11, 2021, 7:36am UTC](https://community.jenkins.io/t/hardcoded-passwords-in-kubernetes-config-maps/509/3 "2021-10-11T07:36:51Z")

</div>

> [@halkeye](#):
>
> coded

They are different ways to manage secrets when you have a Jenkins controller running on Kubernetes as explained [here](https://github.com/jenkinsci/helm-charts/blob/23695c98d7d08ed1f58233ef97831a321b34073b/charts/jenkins/README.md#additional-secrets). That being said, we may have missed something, so please provide more information in DM if you think that it may compromise systems.