Re: Passwords visible in infrastructure logs


Momchil Atanassov
 

Hi Amit,

Thanks for the quick reply!

We get logs from both DEA and Warden.

As for NATS, it's not NATS itself that is logging but rather the `nats_steam_forwarder` ( https://github.com/cloudfoundry/cf-release/tree/master/jobs/nats_stream_forwarder ) job running on the `nats` VMs, as can be seen here: https://github.com/cloudfoundry/cf-release/blob/master/jobs/nats_stream_forwarder/templates/nats_stream_forwarder.rb
It always logs in `info` level so the only way to disable it is to remove it from the deployment configuration so that it is never located on the NATS VM and never runs.

You say that you are running 100% Diego on your productive environment. Doesn't Garden also do some type of logging that would contain the container configuraiton (including environment variables) or are you not running `debug` on your systems?

Regards,
Momchil

Join {cf-dev@lists.cloudfoundry.org to automatically receive all group messages.