From c7ddda1bb6dc85c0d509b656511fd79d3c1d7e06 Mon Sep 17 00:00:00 2001 From: Jan Jansky Date: Tue, 15 Jun 2021 17:15:15 +0200 Subject: [PATCH] [pulpcore] obfuscate two passwords from 'dynaconf list' The command also prints content of /etc/pulp/settings.py where we need to also obfuscate the SECRET_KEY and PASSWORD values. Related: #2583 Resolves: #2584 Signed-off-by: Jan Jansky --- sos/plugins/pulpcore.py | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/sos/plugins/pulpcore.py b/sos/plugins/pulpcore.py index 46fa0d5..f4ac467 100644 --- a/sos/plugins/pulpcore.py +++ b/sos/plugins/pulpcore.py @@ -115,6 +115,15 @@ class PulpCore(Plugin, IndependentPlugin): "/etc/pulp/settings.py", r"(PASSWORD\S*\s*:\s*)(.*)", r"\1********") - + # apply the same for "dynaconf list" output that prints settings.py + # in a pythonic format + self.do_cmd_output_sub( + "dynaconf list", + r"(SECRET_KEY\s*)'(.*)'", + r"\1********") + self.do_cmd_output_sub( + "dynaconf list", + r"(PASSWORD\S*\s*:\s*)(.*)", + r"\1********") # vim: set et ts=4 sw=4 : -- 1.8.3.1