Hey Wilson wilson,

Great article! Still very relevant in 2019 and highly ranking on search engines.

Could I get you to make a modification to the article?

“restuserkey” should no longer be used. It’s deprecated upstream in Kubernetes and using it in your setup leaves you vulnerable to CVE-2019–10225.

Luckily it’s *super* simple to fix. Simply create a secret in the heketi namespace:

oc create secret generic heketi-secret \
  --type="kubernetes.io/glusterfs" --from-literal=key='password' \
  --namespace=storage

And then change “restuserkey” to “secretNamespace: storage” and “secretName: heketi-secret“ in the storage class.

Details on the CVE:

https://access.redhat.com/security/cve/cve-2019-10225

Details on using SecretNamespace and SecretName:

https://kubernetes.io/docs/concepts/storage/storage-classes/#glusterfs