Configure sensitive config values for redaction

[jaydoane]

Overview

This defines a configuration file which specifies sections and fields
for config values that are redacted from logs. Specifically, all
values from the "admins" section and the value of "password" in the
"replicator" section are redacted.

Testing recommendations

This must be tested with its companion PR below.

In a remsh, set an admin password: config:set("admins", "admin1", "secretpassword")., and then reload: config:reload(). and you should see the following redactions in the log:

[notice] 2021-02-20T06:16:30.672944Z node1@127.0.0.1 <0.196.0> -------- config: [admins] admin1 set to '****' for reason nil
[notice] 2021-02-20T06:17:13.720003Z node1@127.0.0.1 <0.196.0> -------- Reload detected config change admins.admin1 = '****'

Related Issues or Pull Requests

apache/couchdb-config#35

Checklist

• Code is written and works correctly
• Changes are covered by tests
• Any new configurable parameters are documented in rel/overlay/etc/default.ini
• A PR for documentation changes has been made in https://github.com/apache/couchdb-documentation

[iilyak]

+1

[iilyak]

The testing instructions are a bit incorrect. The reload event can be tested using the following steps:

1. set an admin password: config:set("admins", "admin1", "secretpassword").
2. manually change one of the digits corresponding to hash of pass for admin1 in dev/lib/node1/etc/local.ini
3. config:reload().