octavia/releasenotes/notes/filter-out-private-information-from-taskflow-logs-0d8697140423b4d5.yaml
Gregory Thiemonge 6c731fa2fd Filter out details from taskflow logs with v2+jobboard
When enabling INFO-level logs in taskflow and using jobboard with
amphorav2, taskflow prints the string representation of a job when it is
completed. It includes the parameters of the flow, which might include
private information from TLS-enabled listeners and pools such as
certificates, private_key and intermediate certificates.

This commit filters out the private information from the logs by using
logging.Filter, it replaces private attributes with '***'.

Story 2010523
Task 47125

Change-Id: I2df8a49851feb1445b5128ce99b880ddb77782ad
2023-01-23 08:28:50 -05:00

13 lines
530 B
YAML

---
security:
- |
Filter out private information from the taskflow logs when ''INFO'' level
messages are enabled and when jobboard is enabled. Logs might have included
TLS certificates and private_key. By default, in Octavia only WARNING and
above messages are enabled in taskflow and jobboard is disabled.
fixes:
- |
The parameters of a taskflow Flow were logged in ''INFO'' level messages by
taskflow, it included TLS-enabled listeners and pools parameters, such as
certificates and private_key.