diff --git a/manila/service.py b/manila/service.py index d5c815971a..eca2960743 100644 --- a/manila/service.py +++ b/manila/service.py @@ -393,6 +393,7 @@ def wait(): # hide flag contents from log if contains a password # should use secret flag when switch over to openstack-common if ("_password" in flag or "_key" in flag or + (flag == "transport_url" and "rabbit:" in flag_get) or (flag == "sql_connection" and "mysql:" in flag_get)): LOG.debug('%(flag)s : FLAG SET ', {"flag": flag}) else: diff --git a/releasenotes/notes/bug-1750074-fix-rabbitmq-password-in-debug-mode-4e136ff86223c4ea.yaml b/releasenotes/notes/bug-1750074-fix-rabbitmq-password-in-debug-mode-4e136ff86223c4ea.yaml new file mode 100644 index 0000000000..59f2bbdc6c --- /dev/null +++ b/releasenotes/notes/bug-1750074-fix-rabbitmq-password-in-debug-mode-4e136ff86223c4ea.yaml @@ -0,0 +1,4 @@ +--- +fixes: + - rabbitmq password is no longer exposed in the logs when debugging is + enabled. \ No newline at end of file