juju logging of crossmodel relations leaks secrets

[Haw Loeung]

Hi,

Juju cross-model relations logging leaks secrets, example:

| 2020-06-22 21:18:02 DEBUG juju.apiserver.common.crossmodel crossmodel.go:168 postgresql/3 updated settings (map[allowed-subnets:10.25.0.0/22 allowed-units:remote-c22abYYYYYYY/65 remote-c22abYYYYYYY/67 database:mydb egress-subnets:10.25.0.6/32 host:10.25.0.6 ingress-address:10.25.0.6 master:dbname=mydb host=10.25.0.5 password=XXXXXXXXXXX port=5432 user=juju_remote-c22abYYYYYYY password:XXXXXXXXXXX port:5432 private-address:10.25.0.6 schema_password:XXXXXXXXXXX schema_user:juju_remote-c22abYYYYYYY standbys:dbname=mydb host=10.25.0.6 password=XXXXXXXXXXX port=5432 user=juju_remote-c22abYYYYYYY state:hot standby user:juju_remote-c22abYYYYYYY version:12])

[Ian Booth (wallyworld)]

Sadly, I think this can happen elsewhere too because we lack the schema support to allow attributes to be flagged as "secret".

[Canonical Juju QA Bot (juju-qa-bot)]

This bug has not been updated in 2 years, so we're marking it Low importance. If you believe this is incorrect, please update the importance.