Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: cepci exposes CDN credentials in console log when running subscirption-manager register #4378

Open
dahorak opened this issue Jan 15, 2025 · 1 comment · May be fixed by #4469
Open

Bug: cepci exposes CDN credentials in console log when running subscirption-manager register #4378

dahorak opened this issue Jan 15, 2025 · 1 comment · May be fixed by #4469
Assignees
Labels
bug in framework Something isn't working in framework

Comments

@dahorak
Copy link

dahorak commented Jan 15, 2025

Describe the bug

cephci exposes CDN credentials into the console log, when running subscirption-manager register .... command:

(cephci.install_prereq) [INFO] - cephci.cephci.ceph.ceph.py:1570 - Execute subscription-manager register --username USERNAME --password EXPOSED_PASSWORD --serverurl subscription.rhsm.redhat.com:443 --baseurl https://cdn.redhat.com --force on IP
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - Registering to: subscription.rhsm.redhat.com:443/subscription
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - The system has been registered with ID: 0a4f3447-bdf1-4ceb-b784-bfa90af1b132
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - The registered system name is: osd-3.srozen9-msc-bz-external.qe.rh-ocs.com
(cephci.install_prereq) [INFO] - cephci.cephci.ceph.ceph.py:1600 - Execution of subscription-manager register --username USERNAME --password EXPOSED_PASSWORD --serverurl subscription.rhsm.redhat.com:443 --baseurl https://cdn.redhat.com --force on IP took 9.010615 seconds.
(cephci.install_prereq) [INFO] - cephci.cephci.tests.misc_env.install_prereq.py:273 - Subscribed to cdn server successfully

To Reproduce
Run Ceph deployment via cephci and search for subscription-manager register command in the console log.

python run.py --cloud baremetal --rhbuild 8.0 --platform rhel-9 --cluster-conf clusters.conf --suite suites/reef/integrations/ocs_rgw_without_ssl_vsphere.yaml --build rc --skip-sos-report --log-level DEBUG --log-dir ceph-ci-logs

Expected behavior
No credentials should be exposed to the console log.

@psathyan psathyan self-assigned this Feb 10, 2025
@psathyan
Copy link
Contributor

We are evaluating to see if logging.filter can help us here.

psathyan added a commit to psathyan/cephci that referenced this issue Feb 23, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
@psathyan psathyan linked a pull request Feb 23, 2025 that will close this issue
2 tasks
psathyan added a commit to psathyan/cephci that referenced this issue Feb 23, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
psathyan added a commit to psathyan/cephci that referenced this issue Feb 24, 2025
Currently, sensitive data is not masked or redacted. With the
help of logging.filter, we attempt to mask the passwords from
being logged to files.

Fixes: red-hat-storage#4378

Signed-off-by: Pragadeeswaran Sathyanarayanan <[email protected]>
@psathyan psathyan added the bug in framework Something isn't working in framework label Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug in framework Something isn't working in framework
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants