Comment 0 for bug 1337268

Revision history for this message
Anastasia Kuznetsova (akuznetsova) wrote : Security issue: passwords are not hidden in logs

Steps to reproduce:
1. Create workbook for example using definition from example (https://github.com/stackforge/mistral-extra/tree/master/examples/vm_job)
2. Create context file: set all needed parameters including passwords
3. Create execution using just created context file

Observed result:
While execution is in progress, we can see process's log:
2014-07-02 13:27:23.688 736 INFO mistral.engine [-] Changed execution state: {'task': u'createVM', 'created_at': '2014-07-02 09:27:17.854263', 'updated_at': None, 'state': 'SUCCESS', 'context': {u'smtp_password': u'P@ssw0rd', u'server_name': u'mistral-send-email', u'ssh_username': u'ubuntu', u'smtp_server': u'smtp.gmail.com:587', u'from_email': <email address hidden>', u'image_id': u'0a1717a1-03b5-4452-ac62-795bf853d098', u'nova_url': u'http://<nova_url>/v2', u'flavor_id': u'2', u'ssh_password': u'P@ssw0rd', u'admin_email': <email address hidden>'}, 'workbook_name': u'wb', 'id': u'56a2bbc6-eb3d-4142-826e-ef48888c6874'}

All passwords aren't hidden.