Skip to content

Log Obfuscation with Empty Secret #10526

@caxefaizan

Description

@caxefaizan

Describe the issue

User is using OSS Kestra for local development and leveraging ENV Variables to set secrets.
Now they kept a secret without any value and that is causing log obfuscation.

Image

From our UI, empty secret values are prohibited.

Reproducible Steps

extraEnv:
  - name: SECRET_EMPTY_SECRET
    value:

Flow

id: rail_288729
namespace: company.team

tasks:
  - id: testDownload
    type: io.kestra.plugin.scripts.shell.Script
    taskRunner: 
      type: io.kestra.plugin.core.runner.Process
    script: |
      cd /app
      pwd
      echo blah blah {{ secret('EMPTY_SECRET')}}

Environment

  • Kestra Version: develop

Metadata

Metadata

Labels

area/backendNeeds backend code changesbugSomething isn't working

Type

No type

Projects

Status

Backlog

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions