Do not record the full context values in plain format, because these
may contain sensitive values such as request token. Use the generic
mask feature to detect potentially sensitive fields and replace raw
values by '***'.
Story: 2011523
Task: 52787
Change-Id: Ic997d36ec188b390473437c874085ef9a8c41f2f
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
(cherry picked from commit 56af015563)
7 lines
230 B
YAML
7 lines
230 B
YAML
---
|
|
security:
|
|
- |
|
|
Previously, cloudkitty-api recorded request token in plain text format when
|
|
a request does not comply with policy rules or debug log is enabled. This
|
|
has been fixed and now token is masked in logs.
|