From 8f7d01216ad00feda86135d72125640df611f3c0 Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <tkajinam@redhat.com>
Date: Mon, 20 Feb 2023 14:08:41 +0900
Subject: [PATCH] container_registry_password should be secret

The [guest_agent] container_registry_password option takes a credential
to access a container registry, thus its value should be hidden from
debug logs.

Story: 2010594
Task: 47456
Change-Id: I8f595fff616606a96e70d1712a3a2e65c85b3476
---
 trove/common/cfg.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/trove/common/cfg.py b/trove/common/cfg.py
index 54dc496137..527c4866b5 100644
--- a/trove/common/cfg.py
+++ b/trove/common/cfg.py
@@ -1536,7 +1536,8 @@ guest_agent_opts = [
     ),
     cfg.StrOpt(
         'container_registry_password',
-        help='The plaintext registry password.'
+        help='The plaintext registry password.',
+        secret=True,
     ),
 ]