You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@camel.apache.org by "Claus Ibsen (Jira)" <ji...@apache.org> on 2023/08/11 13:46:00 UTC

[jira] [Commented] (CAMEL-19736) Environment variables with the name 'secret' aren't masked in logs

    [ https://issues.apache.org/jira/browse/CAMEL-19736?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17753231#comment-17753231 ] 

Claus Ibsen commented on CAMEL-19736:
-------------------------------------

They are generated from all the components and their options that are marked as secret = true

To add extra keys, then the source generator needs to be adjusted, you are welcome to take a look and send a PR. 

> Environment variables with the name 'secret' aren't masked in logs
> ------------------------------------------------------------------
>
>                 Key: CAMEL-19736
>                 URL: https://issues.apache.org/jira/browse/CAMEL-19736
>             Project: Camel
>          Issue Type: Improvement
>          Components: came-core
>    Affects Versions: 3.18.4
>            Reporter: Maarten Donderwinkel
>            Priority: Minor
>
> In the SensitiveUtils 'containsSensitive' method it's determined if an environment variable contains something that can be determined as sensitive data in the logs.
> It's quite a list, but one semi obvious option seems to be missing 'secret'.
> Is it possible to add that to the list SENSITIVE_KEYS?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)