From 0f9dcc4dba0508f4dd571121ce01b0acf4d37414 Mon Sep 17 00:00:00 2001 From: Jay Faulkner Date: Thu, 10 Aug 2023 09:17:02 -0700 Subject: [PATCH] Redact _context from outgoing notifications When sending notifications, we should ensure the _context object gets redacted properly so that no secrets are included. Related-Bug: https://bugs.launchpad.net/ironic/+bug/2030976 Co-Authored-By: Julia Kreger Change-Id: I21d109a90ff879a3d320fa55c8c9717c60879c0c --- ironic/objects/notification.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/ironic/objects/notification.py b/ironic/objects/notification.py index e8ac9b667..d67868371 100644 --- a/ironic/objects/notification.py +++ b/ironic/objects/notification.py @@ -189,7 +189,9 @@ def mask_secrets(payload): """Remove secrets from payload object.""" mask = '******' - dict_fields = ['instance_info', 'driver_info', 'driver_internal_info'] + dict_fields = [ + '_context', 'instance_info', 'driver_info', 'driver_internal_info' + ] for f in dict_fields: if hasattr(payload, f): masked = strutils.mask_dict_password(getattr(payload, f), mask) -- 2.41.0