js admin log exposes secret

jenkins-x-plugins / jx-gitops

a simple CLI tool for working with kubernetes resources files in a GitOps repository

Apache License 2.0

33 stars 50 forks source link

js admin log exposes secret #403

Open ankitm123 opened 3 years ago

ankitm123 commented 3 years ago

The logs from running jx admin operator expose the secrets that is inserted into vault/secret storage:

about to run: /home/.jx3/plugins/bin/vault-1.4.2 kv put secret/jx/basic/auth/htpasswd auth=admin:<password>

jenkins-x-bot commented 3 years ago

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close. Provide feedback via https://jenkins-x.io/community. /lifecycle stale