Skip to content
This repository has been archived by the owner on Jun 13, 2024. It is now read-only.

kubectl: redacted token and password from console log #159

Merged
merged 1 commit into from
Jul 11, 2020

Conversation

Akasurde
Copy link
Member

SUMMARY

** SECURITY_FIX ** for CVE-2020-1753

kubectl connection plugin now redact kubectl_token and
kubectl_password from console log.

Fixes: #65

Signed-off-by: Abhijeet Kasurde akasurde@redhat.com

ISSUE TYPE
  • Bugfix Pull Request
COMPONENT NAME

changelogs/fragments/65_kubectl.yml
plugins/connection/kubectl.py

@codecov
Copy link

codecov bot commented Jul 10, 2020

Codecov Report

Merging #159 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #159   +/-   ##
=======================================
  Coverage   42.41%   42.41%           
=======================================
  Files           3        3           
  Lines         547      547           
  Branches      111      111           
=======================================
  Hits          232      232           
  Misses        271      271           
  Partials       44       44           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 2e86b56...cdee6a3. Read the comment docs.

** SECURITY_FIX ** for CVE-2020-1753

kubectl connection plugin now redact kubectl_token and
kubectl_password from console log.

Fixes: ansible-collections#65

Signed-off-by: Abhijeet Kasurde <akasurde@redhat.com>
Copy link
Collaborator

@fabianvf fabianvf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@Akasurde Akasurde merged commit 6b28ef3 into ansible-collections:master Jul 11, 2020
@Akasurde Akasurde deleted the i65 branch July 11, 2020 03:20
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Open CVE against the kubernetes connection plugin
2 participants