forked from fortinetdev/terraform-google-cloud-modules
-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Cloud Function of fgt_asg_with_function module relies on the admin password for authenticating against asg members' API. Changing the admin password makes the function to stop working and fail updating FGSP peer list or re-electing new primary.
Additionally, the password is visible in plain text in multiple places in the logs typically revealing it to all users of the project.
I suggest using API token added to bootstrap configuration and kept secret from the logs.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels