canonical / mysql-operator

Machine charm for MySQL following the operator framework
https://charmhub.io/mysql
Apache License 2.0
7 stars 12 forks source link

Logging includes passwords in plain text #317

Open mthaddon opened 1 year ago

mthaddon commented 1 year ago

Steps to reproduce

  1. Deploy mysql charm, revision 189 from the edge channel
  2. Trigger Failed to configure users error
  3. See that it includes passwords - https://pastebin.canonical.com/p/g9WGkYyHkj/ is a redacted version where passwords have been replaced.

Expected behavior

Juju logs don't include application passwords.

Actual behavior

Juju logs include application passwords

Versions

Operating system: jammy

Juju CLI: 2.9.44

Juju agent: 2.9.44

Charm revision: 189

LXD: N/A, this is on OpenStack

Log output

https://pastebin.canonical.com/p/g9WGkYyHkj/

Additional context

N/A

github-actions[bot] commented 1 year ago

https://warthogs.atlassian.net/browse/DPE-2480