Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-3195

Secret input field in the Software Template

Prepare for Y ReleasePrepare for Z ReleaseRemove QuarterXMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • None
    • None
    • None
    • True
    • Hide

      None

      Show
      None
    • False
    • Important

      Description of problem:

      The contents of a secret input field in the Software Template is shown on the review page if no value is entered and the default value is used. Snippet of a Software Template: password: title: Repository password type: string default: abcdef ui:field: Secret

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      1. Create a Software Template with this input field
      2. Create a resource using this template
      3. Leave the Repository password field untouched. The default value abcdef will be used
      4. Click Next until the Review page is shown
      5. The value abcdef will be visible
      6. Repeat the steps above and fill in a random password
      7. The password is masked with asterisks on the Review page

      Actual results:

      Expected results:

      Fields with secret data should not visible in the ui nor in logs.

      Reproducibility (Always/Intermittent/Only Once):

      Build Details:

      Additional info (Such as Logs, Screenshots, etc):

            Unassigned Unassigned
            nikhshar@redhat.com Nikhil Sharma
            RHIDP - Core Platform
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: