From 5da7be292664194d9845d1ae77fba821f97ff7fe Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Mon, 20 Mar 2023 18:31:52 +0900 Subject: [PATCH] [coordination] backend_url should be secret The backend_url option can sometimes contain secrets. For example when redis coordination backend is used and authentication is enabled in redis, the plain redis password is put as an URL element. [coordination] backend_url=redis://:password@127.0.0.1:6379 Closes-Bug: #2012246 Change-Id: Ia815720cedda2f5c70205ffda5c765364cee8f8c (cherry picked from commit 8ec46875665e93daf252a9feaf9d36d354c3660c) --- manila/coordination.py | 1 + 1 file changed, 1 insertion(+) diff --git a/manila/coordination.py b/manila/coordination.py index aba2c4dd89..5e73d8de2b 100644 --- a/manila/coordination.py +++ b/manila/coordination.py @@ -30,6 +30,7 @@ LOG = log.getLogger(__name__) coordination_opts = [ cfg.StrOpt('backend_url', + secret=True, default='file://$state_path', help='The back end URL to use for distributed coordination.') ]