From 56c25337a68fb15a9a1403858bef5fa927ad8ec6 Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <kajinamit@oss.nttdata.com>
Date: Sat, 13 Jan 2024 01:03:50 +0900
Subject: [PATCH] The backup_aes_cbc_key option should be secret

This option takes a plain key data.

Change-Id: Ic8a438632ea93da93807c37374eee3b48d06f2d2
---
 trove/common/cfg.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/trove/common/cfg.py b/trove/common/cfg.py
index 63e2d6ddc7..93e26521e4 100644
--- a/trove/common/cfg.py
+++ b/trove/common/cfg.py
@@ -352,7 +352,7 @@ common_opts = [
                           'behalf of the user. This option is ignored.'
     ),
     cfg.StrOpt(
-        'backup_aes_cbc_key', default='',
+        'backup_aes_cbc_key', default='', secret=True,
         help='Default OpenSSL aes_cbc key for decrypting backup data created '
              'prior to Victoria.',
         deprecated_for_removal=True,