From 2edfdba7ce6b6d8e404781617c34613001e17cde Mon Sep 17 00:00:00 2001
From: David Hill <dhill@redhat.com>
Date: Mon, 3 Dec 2018 14:43:29 -0500
Subject: [PATCH] Add secret=true to fixed_key configuration parameter

Add secret=true to fixed_key configuration parameter as that value
shouldn't be logged.

Change-Id: I21e1246769213fb7b9e283c0ed3a369cbe780650
Closes-Bug: #1806473
(cherry picked from commit d433143ba9532ff87911b29d8e1fa14c6545c967)
(cherry picked from commit 1dbcbbc9b3684caf9e312525e44a8089f6a96b3c)
---
 cinder/keymgr/conf_key_mgr.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cinder/keymgr/conf_key_mgr.py b/cinder/keymgr/conf_key_mgr.py
index 5bac9a26bad..b0c2898dae2 100644
--- a/cinder/keymgr/conf_key_mgr.py
+++ b/cinder/keymgr/conf_key_mgr.py
@@ -44,6 +44,7 @@ from cinder.i18n import _
 
 key_mgr_opts = [
     cfg.StrOpt('fixed_key',
+               secret=True,
                help='Fixed key returned by key manager, specified in hex',
                deprecated_group='keymgr'),
 ]