fluent / fluent-plugin-opensearch / 37560099061

93%

push

github

out_opensearch,in_opensearch: mask hosts in the configuration dump (#193)

Before: `hosts` accepts "https://user:password@host" and `endpoint.url`
can carry a user and a password, but neither was marked secret. Fluentd
logs the whole configuration after configure and masks only secret
parameters, so those passwords were written to the log in plain text.

After: `hosts` in both plugins and `endpoint.url` are secret, so the
dump shows "xxxxxx" for them. The host list no longer appears in the
startup log.

Signed-off-by: Kentaro Hayashi <hayashi@clear-code.com>
Co-authored-by: Claude <noreply@anthropic.com>

3 of 3 new or added lines in 2 files covered. (100.0%)

1204 of 1296 relevant lines covered (92.9%)

316.28 hits per line