From 31b518d83836adf80111cb6bbec7f7b30246e8e7 Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Mon, 20 Mar 2023 18:22:05 +0900 Subject: [PATCH] [coordination] backend_url should be secret The backend_url option can sometimes contain secrets. For example when redis coordination backend is used and authentication is enabled in redis, the plain redis password is put as an URL element. [coordination] backend_url=redis://:password@127.0.0.1:6379 Closes-Bug: #2012246 Change-Id: Ib918532d82c4633add7fad9c8441868cfd84001b (cherry picked from commit 1eb2a7ac8677617e5c8a31695206077e05f3c183) --- aodh/coordination.py | 1 + 1 file changed, 1 insertion(+) diff --git a/aodh/coordination.py b/aodh/coordination.py index 66e85e535..4dc00f886 100644 --- a/aodh/coordination.py +++ b/aodh/coordination.py @@ -28,6 +28,7 @@ LOG = log.getLogger(__name__) OPTS = [ cfg.StrOpt('backend_url', + secret=True, help='The backend URL to use for distributed coordination. If ' 'left empty, alarm evaluation won\'t do workload ' 'partitioning and will only function correctly if a '