API message logging should have field blacklist

[Tim Penhey]

The logging of the API calls are extremely useful for development, and in debugging production issues.

However we do not want the logging of "secret" values on in production environments, but we would still like a way to see things during development.

Here is a proposal:

Add a feature flag for detailed logging of api calls. This would show all the details of the call if this developer flag is on.

If the flag is off, the serialized JSON is passed through a sanitizer that looks through the nested dictionaries for any key that matches either the provider secret, or any key Juju uses internally to represent a password.

[Anastasia (anastasia-macmood)]

As this is a tech-debt item, I am lowering its priority and removing from the milestone.

[Canonical Juju QA Bot (juju-qa-bot)]

This bug has not been updated in 5 years, so we're marking it Expired. If you believe this is incorrect, please update the status.