Prevent "encrypted":true values from appearing in logs with apigee-config-maven-plugin

[mark_hammelman]

My organization is using the apigee-config-maven-plugin as part of our CI/CD pipeline. This plugin enables us to sync KVMs. We use Azure's "release pipelines" to manage the deployments to all our Apigee environments and quite a few developers have access to the pipeline's logs.

I've noticed that when maven executes this plugin, the contents of the KVM are displayed in the log.

Is there a way to turn this off? I don't want anyone to be able to view the logs and see these values that we want to keep secret.

[dchiesa1]

@Sai Saran Vaidyanathan maybe you can address this?

[ssvaidyanathan]

Thanks @Dino-at-Google - issue is resolved. Released a version of the plugin

[dchiesa1]

Whoo-hoo, nice turnaround. Thanks for the effort and notification, Sai!

[ssvaidyanathan]

@Mark Hammelman - thanks for raising this. Can you create an issue here. We will look into it

[mark_hammelman]

@Sai Saran Vaidyanathan Issue submitted! Thanks

[ssvaidyanathan]

Hi @Mark Hammelman - Can you please respond to my comment in the GitHub issue please. Not sure if you were notified.

[ssvaidyanathan · Accepted solution]

Thanks @Mark Hammelman. Will look into it.

[ssvaidyanathan]

@Mark Hammelman - v1.3.5 should have the fix. Please try it out and let me know

[mark_hammelman]

You're awesome Sai! I updated to v1.3.5 and see the message "[Request body may contain sensitive data, not shown]" now. This works great! Thank you for the quick update!

[ssvaidyanathan]

Happy to help !