Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not expose changed password and pass properties #1043

Merged
merged 1 commit into from
Jan 11, 2019

Conversation

treydock
Copy link
Collaborator

Pull Request Checklist

Description

Do not expose changed password and pass properties
Disable show_diff for private keys

Related Issue

Fixes #886

Motivation and Context

Passwords should not be logged when changed to avoid exposure and private keys should not log a diff.

How Has This Been Tested?

Using vagrant sensu-server. Example output when I changed passwords:

    sensu-server: Notice: /Stage[main]/Sensu::Rabbitmq::Config/Sensu_rabbitmq_config[sensu-server.example.com]/password: changed password
    sensu-server: Notice: /Stage[main]/Sensu::Api/Sensu_api_config[sensu-server.example.com]/password: changed password

Disable show_diff for private keys
Fixes sensu#886
@ghoneycutt
Copy link
Collaborator

Awesome work!

@ghoneycutt ghoneycutt merged commit 2d28f91 into sensu:master Jan 11, 2019
@ghoneycutt
Copy link
Collaborator

Released in v2.60.0

@treydock treydock deleted the secrets branch January 12, 2019 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Custom types should not log passwords and other sensitive information
2 participants