-
Story
-
Resolution: Done
-
Minor
-
AMQ 7.2.1 Image 1.0.GA
-
None
The default AMQ image launch script prints the following in the log:
Creating Broker with args --silent --role admin --name broker --http-host broker-amq-2.broker-amq-headless.amq-demo.svc.cluster.local --java-options=-Djava.net.preferIPv4Stack=true --user amquser --password=[PWD_VALUE] --allow-anonymous --data /opt/amq/data --clustered --cluster-user=amqcluster --cluster-password=[PWD_VALUE] --host broker-amq-2.broker-amq-headless.amq-demo.svc.cluster.local
With broker and password clusters in the clear
The script responsible for it is:
https://github.com/jboss-container-images/jboss-amq-7-broker-openshift-image/blob/72-1.0.GA/modules/amq-launch/added/launch.sh#L223
It would be great to update the script/image to not print sensitive data.
- is duplicated by
-
ENTMQBR-2628 Ensure sensitive credentials are not logged in plain text
- Closed