Karbor logs rabbitmq password on connection log
Bug #1859540 reported by
wangyu
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Karbor |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Karbor may log rabbitmq password on connection when DEBUG is on.
Example on karbor-protection and karbor-
2020-01-13 20:56:20.138 49854 DEBUG karbor.service [-] transport_url : rabbit:
In a production environment, this is pretty bad.
This bug report is similar to another cinder bug: https:/
To post a comment you must log in.
Reviewed: https:/ /review. opendev. org/702326 /git.openstack. org/cgit/ openstack/ karbor/ commit/ ?id=a0415ae7f54 293a93366d97981 1331489282474c
Committed: https:/
Submitter: Zuul
Branch: master
commit a0415ae7f54293a 93366d979811331 489282474c
Author: wangyu <email address hidden>
Date: Tue Jan 14 10:33:38 2020 +0800
Remove password display for rabbitmq on connection log
When start karbor-protection and karbor- operationengine service,
Karbor will log rabbitmq password if debug is enabled. In a
production environment, this is pretty bad. This patch will fix it.
Change-Id: I11bd6db0017398 69fc6cddd005c99 90d2943b809
Closes-Bug: #1859540