openstack/barbican
Code Issues Proposed changes

Merge "vault: Hide values used for authentication"

Browse Source
This commit is contained in:
Zuul 2024-06-12 15:53:51 +00:00 committed by Gerrit Code Review
commit 3810725bc4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
barbican/plugin/vault_secret_store.py
View File

@ -28,10 +28,13 @@ DEFAULT_MOUNTPOINT = "secret"
vault_opt_group = cfg.OptGroup(name='vault_plugin', title='Vault Plugin') vault_opt_group = cfg.OptGroup(name='vault_plugin', title='Vault Plugin')
vault_opts = [ vault_opts = [
cfg.StrOpt('root_token_id', cfg.StrOpt('root_token_id',
secret=True,
help='root token for vault'), help='root token for vault'),
cfg.StrOpt('approle_role_id', cfg.StrOpt('approle_role_id',
secret=True,
help='AppRole role_id for authentication with vault'), help='AppRole role_id for authentication with vault'),
cfg.StrOpt('approle_secret_id', cfg.StrOpt('approle_secret_id',
secret=True,
help='AppRole secret_id for authentication with vault'), help='AppRole secret_id for authentication with vault'),
cfg.StrOpt('kv_mountpoint', cfg.StrOpt('kv_mountpoint',
default=DEFAULT_MOUNTPOINT, default=DEFAULT_MOUNTPOINT,