hashi-ui icon indicating copy to clipboard operation
hashi-ui copied to clipboard

ACL tokens are logged to console/docker output

Open tommyalatalo opened this issue 3 years ago • 0 comments

When using Consul/Nomad ACL:s the logs for hashi-ui print out the tokens in plain text. This should probably be disabled by default and maybe allowed using some variable like SHOW_CREDENTIALS.

Example log output:

time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="|                                 HASHI UI                                       |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="| listen-address            : http://0.0.0.0:3000                                |"
time="2020-09-03T11:48:25Z" level=info msg="| server-certificate        :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| server-key                :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| site-title                : mySite                                           |"
time="2020-09-03T11:48:25Z" level=info msg="| proxy-address             :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| log-level                 : info                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-enable          : false                                              |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-app-name        : hashi-ui                                           |"
time="2020-09-03T11:48:25Z" level=info msg="| throttle-update-duration  : 0s                                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-enable              : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-read-only           : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-address             : http://nomad-servers:4646                          |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-acl-token           : 6bad8a5c-2387-0024-df92-348e6b0fa833               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-ca-cert             :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-cert         :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-key          :                                                    |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify         : false                                              |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-hide-env-data       : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify         : No                                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-allow-stale         : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-color               : #4b9a7d                                            |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-enable             : true                                               |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-read-only          : Yes                                                |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-address            : http://consul:8500                                 |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-acl-token          : b7f60166-1fef-5b60-ccba-5323d82c38f8               |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-color              : #694a9c                                            |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------

tommyalatalo avatar Sep 03 '20 11:09 tommyalatalo