summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEric Brown <browne@vmware.com>2015-04-13 11:37:53 -0700
committerDoug Hellmann <doug@doughellmann.com>2015-04-15 20:08:09 +0000
commit86df39c01e96ad3b15e33eb6fc1bf726a0a704c5 (patch)
treeafe1850ef50215ed47e3c841244385aa68cc3113
parenta3d8ae8f5fa092fe99a35c0ea714eb5ce81bcc0b (diff)
downloadkeystone-86df39c01e96ad3b15e33eb6fc1bf726a0a704c5.tar.gz
backend_argument should be marked secret
Since the backend_argument can potentially contain a password, it should be marked secret to avoid leakage into the logs. Closes-Bug: #1443598 Change-Id: I55663db4cf2df84a66de8f64fba4b4f129ae827d (cherry picked from commit f9db1a65bd4d83d12c572ba4d5807845996ef410)
-rw-r--r--keystone/common/config.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/keystone/common/config.py b/keystone/common/config.py
index ebc1c2fa7..7a8c385a3 100644
--- a/keystone/common/config.py
+++ b/keystone/common/config.py
@@ -326,7 +326,7 @@ FILE_OPTIONS = {
'deployments. Small workloads (single process) '
'like devstack can use the dogpile.cache.memory '
'backend.'),
- cfg.MultiStrOpt('backend_argument', default=[],
+ cfg.MultiStrOpt('backend_argument', default=[], secret=True,
help='Arguments supplied to the backend module. '
'Specify this option once per argument to be '
'passed to the dogpile.cache backend. Example '