Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: cepci exposes CDN credentials in console log when running subscirption-manager register #4378

Open
dahorak opened this issue Jan 15, 2025 · 0 comments

Comments

@dahorak
Copy link

dahorak commented Jan 15, 2025

Describe the bug

cephci exposes CDN credentials into the console log, when running subscirption-manager register .... command:

(cephci.install_prereq) [INFO] - cephci.cephci.ceph.ceph.py:1570 - Execute subscription-manager register --username USERNAME --password EXPOSED_PASSWORD --serverurl subscription.rhsm.redhat.com:443 --baseurl https://cdn.redhat.com --force on IP
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - Registering to: subscription.rhsm.redhat.com:443/subscription
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - The system has been registered with ID: 0a4f3447-bdf1-4ceb-b784-bfa90af1b132
(cephci.install_prereq) [DEBUG] - cephci.cephci.ceph.ceph.py:1184 - The registered system name is: osd-3.srozen9-msc-bz-external.qe.rh-ocs.com
(cephci.install_prereq) [INFO] - cephci.cephci.ceph.ceph.py:1600 - Execution of subscription-manager register --username USERNAME --password EXPOSED_PASSWORD --serverurl subscription.rhsm.redhat.com:443 --baseurl https://cdn.redhat.com --force on IP took 9.010615 seconds.
(cephci.install_prereq) [INFO] - cephci.cephci.tests.misc_env.install_prereq.py:273 - Subscribed to cdn server successfully

To Reproduce
Run Ceph deployment via cephci and search for subscription-manager register command in the console log.

python run.py --cloud baremetal --rhbuild 8.0 --platform rhel-9 --cluster-conf clusters.conf --suite suites/reef/integrations/ocs_rgw_without_ssl_vsphere.yaml --build rc --skip-sos-report --log-level DEBUG --log-dir ceph-ci-logs

Expected behavior
No credentials should be exposed to the console log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant