nodetool password displayed in logs when in debug mode

[giom-l]

Project board link

Detected version : 0.10.0

Nodetool user and password are stored in Nodetool class instance.

When a nodetool command is run (like here) and medusa is in debug mode, all nodetool parameters are logged, including the password.

IMO, a password should never be logged anywhere, no matter what is the log level.

┆Issue is synchronized with this Jira Story by Unito

[adejanovski]

Agreed, and good catch 👍

[rhardouin]

I see two options:

1. Generate safe command lines with sensitive data stripped out prior to log them
2. Use a specific logger Formatter that uses a regex to replace sensitive data with a hardcoded string e.g. ***

Option 2 can be extended to include other secrets -- not only nodetool password.