Mark sensitive config options as secret.

Avoid these values inadvertently leaking into logs.

Change-Id: Iec3a683f8aeca265143ac450f5153f3d10dba1c5

ceilometer/publisher/meter.py

@@ -40,6 +40,7 @@ METER_PUBLISH_OPTS = [
                deprecated_group="DEFAULT",
                ),
     cfg.StrOpt('metering_secret',
+               secret=True,
                default='change this or be hacked',
                help='Secret value for signing metering messages',
                deprecated_group="DEFAULT",

ceilometer/service.py

@@ -46,6 +46,7 @@ CLI_OPTIONS = [
                default=os.environ.get('OS_USERNAME', 'ceilometer'),
                help='Username to use for openstack service access'),
     cfg.StrOpt('os-password',
+               secret=True,
                default=os.environ.get('OS_PASSWORD', 'admin'),
                help='Password to use for openstack service access'),
     cfg.StrOpt('os-tenant-id',

ceilometer/storage/__init__.py

@@ -34,6 +34,7 @@ STORAGE_ENGINE_NAMESPACE = 'ceilometer.storage'
 
 STORAGE_OPTS = [
     cfg.StrOpt('database_connection',
+               secret=True,
                default='mongodb://localhost:27017/ceilometer',
                help='Database connection string',
                ),