Rundeck - Disable logging of password field

Question

Kindly help me with any configuration changes that can be done to avoid logging of password field in rundeck logs.

It seems even though password fields are not visible via UI but in rundeck logs it does capture it as a plaintext.

The issue still persists after upgrade to 2.6.8 version of Rundeck. Similar report is https://github.com/rundeck/rundeck/issues/1780

Can someone post a workaround for this as it is critical to either disable the debug option or fix this.

Thanks

do you mean, the password shows as plaintext in rundeck service log ? — Leo Prince, Feb 14 '16 at 16:11
@LeoPrince Yes it is coming as plaintext in rundeck service log. — KronnorK, Feb 16 '16 at 03:55
Yeah me too using 2.6 and I used 2.5 before as well, never had such an issue. Got to check with 2.2 to see if there any work around.. — Leo Prince, Feb 17 '16 at 11:14
@BMW I upgraded to 2.6.8 but in debug log it shows the password as plaintext RD_SECUREOPTION_PASSWORD=plaintext password. Did you also have the same issue while running the jobs in Debug mode? Is there a way to disable debug option? — KronnorK, Sep 09 '16 at 08:28

score 0 · Answer 1 · answered Sep 16 '20 at 14:09

0

Just for the record answer: Right now you can use the Mask Password output filter to hide any password entries on any step.

answered Sep 16 '20 at 14:09

MegaDrive68k

1 Answers1