canonical / hardware-observer-operator

A charm to setup prometheus exporter for IPMI, RedFish and RAID devices from different vendors.
Apache License 2.0
7 stars 14 forks source link

prevent redfish password from being logged into charm unit logs #176

Closed nishant-dash closed 3 months ago

nishant-dash commented 4 months ago

Current I see the password gets logged as plaintext to the charm unit logs (and therefore juju debug-log)

2024-02-28 10:58:18 INFO unit.hardware-observer/5.juju-log server.go:325 Setting redfish-password to: XXXXXXXXXX

also it would be great to not have it logged in plaintext in /etc/hardware-exporter-config.yaml

chanchiwai-ray commented 4 months ago

The second part of the issue is raised in #210