From 81f3475971823ee82fb9c73f20bc64051d0cba36 Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Mon, 20 Mar 2023 18:26:17 +0900 Subject: [PATCH] [coordination] backend_url should be secret The backend_url option can sometimes contain secrets. For example when redis coordination backend is used and authentication is enabled in redis, the plain redis password is put as an URL element. [coordination] backend_url=redis://:password@127.0.0.1:6379 Closes-Bug: #2012246 Change-Id: I0ee95fc56130e51bf5c799d252e79a469492b7db (cherry picked from commit 541395c42414c40d105ce206e2f200456bbc375f) (cherry picked from commit bda31ec62c3eaa7fcdd25d69f97742744debf915) (cherry picked from commit be775801e33313305b5d90dca10bae166e6938c8) (cherry picked from commit f1981d057f08f9229eba2e8191dc06b22be1cffd) --- designate/conf/coordination.py | 1 + 1 file changed, 1 insertion(+) diff --git a/designate/conf/coordination.py b/designate/conf/coordination.py index 280ec63e4..f8180a9d3 100644 --- a/designate/conf/coordination.py +++ b/designate/conf/coordination.py @@ -25,6 +25,7 @@ COORDINATION_GROUP = cfg.OptGroup( COORDINATION_OPTS = [ cfg.StrOpt( 'backend_url', + secret=True, help=( 'The backend URL to use for distributed coordination. If ' 'unset services that need coordination will function as '