Description of problem (please be detailed as possible and provide log snippests): The pod logs for the core and endpoint MCG pods show the database password in clear text.
Was fixed as a larger fix (Epic for 4.15) https://github.com/noobaa/noobaa-core/pull/7504 Trying to see if we can backport only the password thing
Verified with build "4.14.0-154", there is no DB password showing up in clear text in both noobaa-core and noobaa-endpoint pod logs: Snipped from noobaa-core logs: Oct-19 3:08:29.341 [Upgrade/20] [L0] core.util.postgres_client:: connect called, current url { max: 10, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 } Oct-19 3:08:29.341 [Upgrade/20] [L0] core.util.postgres_client:: _connect: called with { max: 10, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 } Oct-19 3:08:29.764 [Upgrade/20] [L0] core.util.postgres_client:: _connect: connected { max: 10, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 } Snipped from noobaa-endpoint logs: Oct-19 2:58:12.165 [Endpoint/13] [L0] core.util.postgres_client:: connect called, current url { max: 80, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 } Oct-19 2:58:12.166 [Endpoint/13] [L0] core.util.postgres_client:: _connect: called with { max: 80, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 } Oct-19 2:58:12.858 [Endpoint/13] [L0] core.util.postgres_client:: _connect: connected { max: 80, host: 'noobaa-db-pg-0.noobaa-db-pg', user: 'noobaa', database: 'nbcore', port: 5432 }
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2023:6832