Bug 1495267
| Summary: | RFE: ovirt-log-collector-analyzer: hide fence passwords via switch | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Virtualization Manager | Reporter: | Douglas Schilling Landgraf <dougsland> |
| Component: | ovirt-log-collector | Assignee: | Douglas Schilling Landgraf <dougsland> |
| Status: | CLOSED ERRATA | QA Contact: | Jiri Belka <jbelka> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.1.5 | CC: | danken, dougsland, jbelka, lsvaty, mkeir, ylavi |
| Target Milestone: | ovirt-4.2.0 | Keywords: | EasyFix, FutureFeature, Improvement |
| Target Release: | 4.2.0 | Flags: | lsvaty:
testing_plan_complete-
|
| Hardware: | All | ||
| OS: | All | ||
| Whiteboard: | |||
| Fixed In Version: | ovirt-log-collector-4.2.0-1.el7ev | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-05-15 17:31:24 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Integration | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Can you please detail? I've not understood which password needs to be hidden and where. Section 8 of the report under the heading: "8. Fence agent password per host" Why is that needed to be hidden? Another user WANTED us to capture them, so that it is easier to restore them when a host is removed and re-added to the same Engine. Passwords are not normally exposed in reports shared between groups for analysis. Some companies, Atlassian is an example, provide tools to make data dumps for support anonymous. I'd feel more comfortable if the default behaviour was to not include the fence passwords in the report for security. If they were to be needed, they might be included in the report via a verbose|debug option. When we write ansible code where credentials are involved, we normally use "no_log" to hide the credential. It can be exposed for verification by turning up the "-vvv" level. ok, ovirt-log-collector-analyzer-4.2.0-1.el7ev.noarch tested with a sosreport from 4.1 env as with 4.2 env sosreport it has issue - https://bugzilla.redhat.com/show_bug.cgi?id=1539027 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1465 BZ<2>Jira Resync |
Description of problem: User requested to hide encrypted fence passwords information via switch.