Anas Khan 1013a8effc csi: do not log peer bootstrap token secret ...

decodePeerToken logged the whole decoded PeerToken with "%+v" at debug
level. PeerToken embeds Key, the peer cluster's cephx auth secret, so
running the operator with ROOK_LOG_LEVEL=DEBUG wrote that credential to
the operator logs in plaintext (CWE-532).

Log only the non-sensitive fields (fsid, client id, mon host, namespace),
which keep the message useful for diagnostics, and drop Key. Add a
regression test that captures the debug output and asserts the key is
never present.

Signed-off-by: Anas Khan <83116240+anxkhn@users.noreply.github.com>

2026-07-14 16:55:01 +05:30

..

ceph

csi: do not log peer bootstrap token secret

2026-07-14 16:55:01 +05:30

discover

core: use slices.Contains to simplify code

2026-06-25 10:17:53 +08:00

k8sutil

core: use slices.Contains to simplify code

2026-06-25 10:17:53 +08:00

test

build(deps): bump the k8s-dependencies group with 6 updates

2026-01-07 07:59:21 -07:00