hashi-ui
hashi-ui copied to clipboard
ACL tokens are logged to console/docker output
When using Consul/Nomad ACL:s the logs for hashi-ui print out the tokens in plain text. This should probably be disabled by default and maybe allowed using some variable like SHOW_CREDENTIALS.
Example log output:
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="| HASHI UI |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------
time="2020-09-03T11:48:25Z" level=info msg="| listen-address : http://0.0.0.0:3000 |"
time="2020-09-03T11:48:25Z" level=info msg="| server-certificate : |"
time="2020-09-03T11:48:25Z" level=info msg="| server-key : |"
time="2020-09-03T11:48:25Z" level=info msg="| site-title : mySite |"
time="2020-09-03T11:48:25Z" level=info msg="| proxy-address : |"
time="2020-09-03T11:48:25Z" level=info msg="| log-level : info |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-enable : false |"
time="2020-09-03T11:48:25Z" level=info msg="| new-relic-app-name : hashi-ui |"
time="2020-09-03T11:48:25Z" level=info msg="| throttle-update-duration : 0s |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-enable : true |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-read-only : Yes |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-address : http://nomad-servers:4646 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-acl-token : 6bad8a5c-2387-0024-df92-348e6b0fa833 |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-ca-cert : |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-cert : |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-client-key : |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify : false |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-hide-env-data : true |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-skip-verify : No |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-allow-stale : Yes |"
time="2020-09-03T11:48:25Z" level=info msg="| nomad-color : #4b9a7d |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-enable : true |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-read-only : Yes |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-address : http://consul:8500 |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-acl-token : b7f60166-1fef-5b60-ccba-5323d82c38f8 |"
time="2020-09-03T11:48:25Z" level=info msg="| consul-color : #694a9c |"
time="2020-09-03T11:48:25Z" level=info msg=----------------------------------------------------------------------------------