puppet-archive icon indicating copy to clipboard operation
puppet-archive copied to clipboard

archive module reveals sensitive information

Open Simoliv opened this issue 1 year ago • 0 comments

When running archive module with (fe) JFrog Api headers, this value is visible and unhideable in puppet logs (fe in stdout)

What are you seeing

puppet agent run shows snesitive information

What behaviour did you expect instead

an option to hide/redact this sensitive information

Output log

For example : /var/log/messages-20230903:Aug 31 02:46:00 XXXXXXXXX puppet-agent[24334]: (/Stage[main]/This_filebeat/Archive[etc/filebeat/filebeat-8.9.0-x86_64.rpm]) Could not evaluate: Execution of 'wget -qO- https://XXXXXXXXXXXXXXXXX/artifactory/co/elastic/filebeat/8.9.0/filebeat-8.9.0-x86_64.rpm.md5 --max-redirect=5 --header "X-JFrog-Art-Api: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"' returned 8:

Any additional information you'd like to impart

I tried to use Sensitive datatype in various options, without success yet.

Simoliv avatar Sep 21 '23 07:09 Simoliv