Skip to content
This repository has been archived by the owner on Feb 26, 2023. It is now read-only.

ACL tokens are logged to console/docker output #600

Open
tommyalatalo opened this issue Sep 3, 2020 · 0 comments
Open

ACL tokens are logged to console/docker output #600

tommyalatalo opened this issue Sep 3, 2020 · 0 comments

Comments

@tommyalatalo
Copy link

When using Consul/Nomad ACL:s the logs for hashi-ui print out the tokens in plain text.
This should probably be disabled by default and maybe allowed using some variable like SHOW_CREDENTIALS.

Example log output:

time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="|                                 HASHI UI                                       |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="| listen-address            : http://0.0.0.0:3000                                |"
time="2020-09-03T11:48:25Z" level=info msg="| server-certificate        :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| server-key                :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| site-title                : mySite                                           |"
time="2020-09-03T11:48:25Z" level=info msg="| proxy-address             :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| log-level                 : info                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-enable          : false                                              |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-app-name        : hashi-ui                                           |"
time="2020-09-03T11:48:25Z" level=info msg="| throttle-update-duration  : 0s                                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-enable              : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-read-only           : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-address             : http://nomad-servers:4646                          |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-acl-token           : 6bad8a5c-2387-0024-df92-348e6b0fa833               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-ca-cert             :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-cert         :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-key          :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify         : false                                              |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-hide-env-data       : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify         : No                                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-allow-stale         : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-color               : #4b9a7d                                            |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-enable             : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-read-only          : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-address            : http://consul:8500                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-acl-token          : b7f60166-1fef-5b60-ccba-5323d82c38f8               |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-color              : #694a9c                                            |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant