From 33dc9f7bbd4ceecf2a590a30e6df034a32a31597 Mon Sep 17 00:00:00 2001
From: David Hill <dhill@redhat.com>
Date: Mon, 3 Dec 2018 14:39:51 -0500
Subject: [PATCH] Add secret=true to fixed_key configuration parameter

Add secret=true to fixed_key configuration parameter as that value
shouldn't be logged.

Change-Id: Ie6da21e8680b2deb6b1da3add31cd725ba855c1c
Closes-Bug: #1806471
(cherry picked from commit 37a036672e459b0d83b7b91120c8ec40e3759190)
(cherry picked from commit 7ef3304b12e2a6a89cfedc99e09b214ae6de3d7a)
---
 nova/conf/key_manager.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nova/conf/key_manager.py b/nova/conf/key_manager.py
index d86182de7240..1aceed060eb1 100644
--- a/nova/conf/key_manager.py
+++ b/nova/conf/key_manager.py
@@ -27,6 +27,7 @@ key_manager_opts = [
     cfg.StrOpt(
         'fixed_key',
         deprecated_group='keymgr',
+        secret=True,
         help="""
 Fixed key returned by key manager, specified in hex.