Skip to content

24.8 Avoid leaking AWS secrets via logs #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from

Conversation

Enmk
Copy link
Member

@Enmk Enmk commented Mar 19, 2025

Changelog category (leave one):

  • Not for changelog (changelog entry is not required)

Exclude tests:

  • Fast test
  • Integration Tests
  • Stateless tests
  • Stateful tests
  • Performance tests
  • All with ASAN
  • All with TSAN
  • All with MSAN
  • All with UBSAN
  • All with Coverage
  • All with Aarch64

Using credentials file instead of environment
@MyroTk
Copy link
Collaborator

MyroTk commented Mar 19, 2025

We can remove the credentials from the function inputs

s3_access_key_id: str,

s3_secret_access_key: str,

and then the commented out ones as well
"", #args.s3_access_key_id,

"", #args.s3_secret_access_key,

@Enmk
Copy link
Member Author

Enmk commented Mar 19, 2025

We can remove the credentials from the function inputs

My motivation was to stick as close to upstream as possible to avoid merge conflicts down the road, when we are going to port that to the other versions...

@MyroTk
Copy link
Collaborator

MyroTk commented Mar 19, 2025

Actually removing them would be closer to upstream - for example, 24.8 doesn't have them https://github.com/ClickHouse/ClickHouse/blob/24.8/docker/packager/packager . Same with master

@Enmk
Copy link
Member Author

Enmk commented Mar 25, 2025

Continued in #693

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants