[
https://issues.apache.org/jira/browse/CAMEL-25096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on CAMEL-25096 started by Claus Ibsen.
-------------------------------------------
> camel-core - Properties component: mask the values of vault functions and
> sensitive keys when logging
> -----------------------------------------------------------------------------------------------------
>
> Key: CAMEL-25096
> URL: https://issues.apache.org/jira/browse/CAMEL-25096
> Project: Camel
> Issue Type: Improvement
> Components: camel-core
> Reporter: Claus Ibsen
> Assignee: Claus Ibsen
> Priority: Minor
>
> The properties component logs the resolved value of a property placeholder at
> DEBUG/TRACE level (such as "Property with key [aws:db/password] applied by
> function [aws] -> <value>"). The values of properties functions for vaults
> (aws, aws-parameterstore, azure, gcp, hashicorp, ibm, cyberark and the
> kubernetes secret functions) and of properties with a sensitive key (such as
> db.password) should be logged as {{xxxxxx}}, the same mask as used for
> endpoint uris.
> * A new default method {{isSensitive()}} on {{PropertiesFunction}} (default
> false), which the vault functions return true for.
> * DefaultPropertiesParser, DefaultPropertiesLookup and PropertiesComponent
> mask the values of sensitive functions and sensitive keys in their logging.
> * Add {{db_password}} (such as DB_PASSWORD) and {{apisecret}} (such as
> apiSecret) as sensitive keys.
> _Claude Code on behalf of Claus Ibsen_
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
