fluent / fluent-plugin-opensearch / 35172368419

93%

main: 93%

Pull #193

github

out_opensearch,in_opensearch: mask hosts in the configuration dump

Before: `hosts` accepts "https://user:password@host" and `endpoint.url`
can carry a user and a password, but neither was marked secret. Fluentd
logs the whole configuration after configure and masks only secret
parameters, so those passwords were written to the log in plain text.

After: `hosts` in both plugins and `endpoint.url` are secret, so the
dump shows "xxxxxx" for them. The host list no longer appears in the
startup log.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>

3 of 3 new or added lines in 2 files covered. (100.0%)

1194 of 1286 relevant lines covered (92.85%)

313.24 hits per line