Sensu service is overriding redact with empty list
Bug #1641080 reported by
Martin Mágr
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
High
|
Martin Mágr |
Bug Description
OpenStack auth password can be seen as clear text in Uchiwa and Sensu logs, because we override default password redaction with empty list in /etc/sensu/
Changed in tripleo: | |
assignee: | nobody → Martin Mágr (mmagr) |
status: | New → In Progress |
To post a comment you must log in.
Reviewed: https:/ /review. openstack. org/394847 /git.openstack. org/cgit/ openstack/ tripleo- heat-templates/ commit/ ?id=c921b15c905 eb609f0a3e1bd59 43e24da46f549f
Committed: https:/
Submitter: Jenkins
Branch: master
commit c921b15c905eb60 9f0a3e1bd5943e2 4da46f549f
Author: Martin Mágr <email address hidden>
Date: Tue Nov 8 10:04:41 2016 +0100
Use default Sensu redact
By default sensu-puppet is overring default list of varibles which should
be redacted. This patch enables to configure redact list and uses default
value given by [1]. This patch also serves as a workaround until [2]
is merged in the module itself (or in case it won't get merged).
[1] https:/ /sensuapp. org/docs/ 0.24/reference/ clients. html /github. com/sensu/ sensu-puppet/ pull/580
[2] https:/
Closes-Bug: #1641080 5f571091603126c f11cfdd8c40
Closes-Bug: rhbz#1392473
Change-Id: I21201f734d2fbf