Files
cloudkitty/releasenotes/notes/hide-token-from-log-e29066d6c93f3ed4.yaml
Takashi Kajinami 56af015563 Hide credentials in contexts from logs
Do not record the full context values in plain format, because these
may contain sensitive values such as request token. Use the generic
mask feature to detect potentially sensitive fields and replace raw
values by '***'.

Story: 2011523
Task: 52787
Change-Id: Ic997d36ec188b390473437c874085ef9a8c41f2f
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-09-12 10:15:50 +09:00

7 lines
230 B
YAML

---
security:
- |
Previously, cloudkitty-api recorded request token in plain text format when
a request does not comply with policy rules or debug log is enabled. This
has been fixed and now token is masked in logs.