Redact sensitive values from config in health data (#12421)

The health api returns the server configuration details. Redact
sensitive values from the config values like URLs and credentials.
This commit is contained in:
Shireesh Anjal
2021-06-03 20:45:44 +05:30
committed by GitHub
parent 7a3b5235bf
commit fb140c146b
8 changed files with 73 additions and 1 deletions

View File

@@ -26,6 +26,7 @@ var (
Key: ServerAddr,
Description: `AD/LDAP server address e.g. "myldapserver.com:636"`,
Type: "address",
Sensitive: true,
},
config.HelpKV{
Key: STSExpiry,
@@ -38,12 +39,14 @@ var (
Description: `DN for LDAP read-only service account used to perform DN and group lookups`,
Optional: true,
Type: "string",
Sensitive: true,
},
config.HelpKV{
Key: LookupBindPassword,
Description: `Password for LDAP read-only service account used to perform DN and group lookups`,
Optional: true,
Type: "string",
Sensitive: true,
},
config.HelpKV{
Key: UserDNSearchBaseDN,
@@ -62,6 +65,7 @@ var (
Description: `";" separated list of username bind DNs e.g. "uid=%s,cn=accounts,dc=myldapserver,dc=com"`,
Optional: true,
Type: "list",
Sensitive: true,
},
config.HelpKV{
Key: GroupSearchFilter,