From 919dd16a35ef2d0fd2ee4911398ba7830c02c6fd Mon Sep 17 00:00:00 2001 From: Marga Millet Date: Fri, 16 Feb 2018 23:05:47 +0000 Subject: [PATCH] Cinder logs rabbitmq password on connection log Cinder displays rabbitmq password if debug is enabled. Closes-Bug: 1750074 Change-Id: I117319ac12991e4b46170fe71d18a65ea4c98556 --- cinder/service.py | 1 + 1 file changed, 1 insertion(+) diff --git a/cinder/service.py b/cinder/service.py index 6b80e619498..eee8ff3be30 100644 --- a/cinder/service.py +++ b/cinder/service.py @@ -629,6 +629,7 @@ def wait(): # hide flag contents from log if contains a password # should use secret flag when switch over to openstack-common if ("_password" in flag or "_key" in flag or + (flag == "transport_url" and "rabbit:" in flag_get) or (flag == "sql_connection" and ("mysql:" in flag_get or "postgresql:" in flag_get))): LOG.debug('%s : FLAG SET ', flag)