Bug 1025776

Summary:	Platform trace log contains database gear password
Product:	OpenShift Container Platform	Reporter:	Andrew Butcher <abutcher>
Component:	Containers	Assignee:	Brenton Leanhardt <bleanhar>
Status:	CLOSED CURRENTRELEASE	QA Contact:	libra bugs <libra-bugs>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	1.2.1	CC:	anli, libra-onpremise-devel
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-03-21 20:27:01 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Andrew Butcher 2013-11-01 14:25:55 UTC

Description of problem:
Creating application which includes database gear will log database credentials in /var/log/openshift/node/platform-trace.log.

Version-Release number of selected component (if applicable):
1.2.1

How reproducible:
Always

Steps to Reproduce:
1. Create app with database gear add on.


Actual results:
From /var/log/openshift/node/platform-trace.log:

CLIENT_RESULT: MySQL 5.1 database added.  Please make note of these credentials:
CLIENT_RESULT:        Root User: <ROOTUSERNAME>
CLIENT_RESULT:    Root Password: <ROOTPASSWORD>
CLIENT_RESULT:    Database Name: <dbname>
...
CART_PROPERTIES: username=<ROOTUSERNAME>
CART_PROPERTIES: password=<ROOTPASSWORD>
CART_PROPERTIES: database_name=<dbname>
...

Expected results:
Passwords are filtered out.

Additional info:
None

Comment 2 Johnny Liu 2014-01-02 12:09:29 UTC

*** Bug 1045303 has been marked as a duplicate of this bug. ***