Found a very rare case with password eventually containing two percent symbols, separated by other symbols. If such password is passed via environment variable, plugin puts the parameter value instead of secret.
Create vault secret like {"password": "asdf%1234%zxcv"}
Pass the secret over the enviromnent vriable parameter, i.e create the env variable with value %vault:some/path!/password%
Variable will have it's original value %vault:some/path!/password% instead of password. This only happens with environment variable.
If existing parameter name is used between % symbols (example: { "password": "qwer%teamcity.vault.supported%zxcv" }, the enviromnent variable is templated with this parameter. This happens with both - variable and parameter used "as is".
Hi.
Found a very rare case with password eventually containing two percent symbols, separated by other symbols. If such password is passed via environment variable, plugin puts the parameter value instead of secret.
Version: TeamCity Enterprise 2019.2.2 (build 71923)
Steps to reproduce
{"password": "asdf%1234%zxcv"}
%vault:some/path!/password%
%vault:some/path!/password%
instead of password. This only happens with environment variable.{ "password": "qwer%teamcity.vault.supported%zxcv" }
, the enviromnent variable is templated with this parameter. This happens with both - variable and parameter used "as is".