diff options
author | Takashi Kajinami <tkajinam@redhat.com> | 2023-03-20 18:26:17 +0900 |
---|---|---|
committer | Takashi Kajinami <tkajinam@redhat.com> | 2023-03-21 10:55:12 +0000 |
commit | bda31ec62c3eaa7fcdd25d69f97742744debf915 (patch) | |
tree | ce7f091b08d64904240d82b4174f51a0ccddf155 | |
parent | 766cfd8d63772677ae2c9ed8dabcc0dbad410c75 (diff) | |
download | designate-bda31ec62c3eaa7fcdd25d69f97742744debf915.tar.gz |
[coordination] backend_url should be secret
The backend_url option can sometimes contain secrets.
For example when redis coordination backend is used and authentication
is enabled in redis, the plain redis password is put as an URL element.
[coordination]
backend_url=redis://:password@127.0.0.1:6379
Closes-Bug: #2012246
Change-Id: I0ee95fc56130e51bf5c799d252e79a469492b7db
(cherry picked from commit 541395c42414c40d105ce206e2f200456bbc375f)
-rw-r--r-- | designate/conf/coordination.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/designate/conf/coordination.py b/designate/conf/coordination.py index 280ec63e..f8180a9d 100644 --- a/designate/conf/coordination.py +++ b/designate/conf/coordination.py @@ -25,6 +25,7 @@ COORDINATION_GROUP = cfg.OptGroup( COORDINATION_OPTS = [ cfg.StrOpt( 'backend_url', + secret=True, help=( 'The backend URL to use for distributed coordination. If ' 'unset services that need coordination will function as ' |