Skip to content

archive module reveals sensitive information #507

@Simoliv

Description

@Simoliv

When running archive module with (fe) JFrog Api headers, this value is visible and unhideable in puppet logs (fe in stdout)

What are you seeing

puppet agent run shows snesitive information

What behaviour did you expect instead

an option to hide/redact this sensitive information

Output log

For example :
/var/log/messages-20230903:Aug 31 02:46:00 XXXXXXXXX puppet-agent[24334]: (/Stage[main]/This_filebeat/Archive[etc/filebeat/filebeat-8.9.0-x86_64.rpm]) Could not evaluate: Execution of 'wget -qO- https://XXXXXXXXXXXXXXXXX/artifactory/co/elastic/filebeat/8.9.0/filebeat-8.9.0-x86_64.rpm.md5 --max-redirect=5 --header "X-JFrog-Art-Api: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"' returned 8:

Any additional information you'd like to impart

I tried to use Sensitive datatype in various options, without success yet.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions