Skip to content

Commit

Permalink
Merge #131150
Browse files Browse the repository at this point in the history
131150: sql: make hba_conf and id_map cluster settings sensitive r=pritesh-lahoti a=souravcrl

fixes #129126 
fixes CRDB-41389
Epic CRDB-33829

Release note(security, ops): Cluster settings for host based authentication configuration (`server.host_based_authentication.configuration`) and identity map configuration(`server.identity_map.configuration`) need to be redacted as they can  be configured to contain LDAP bind usernames, passwords and mapping of external identities to sql users which are sensitive and should be configurable for redaction via `server.redact_sensitive_settings.enabled` cluster setting.

Co-authored-by: souravcrl <[email protected]>
  • Loading branch information
craig[bot] and souravcrl committed Sep 26, 2024
2 parents 8e6e409 + 3333abc commit 3aa49f8
Show file tree
Hide file tree
Showing 5 changed files with 294 additions and 159 deletions.
152 changes: 0 additions & 152 deletions pkg/ccl/logictestccl/testdata/logic_test/oidc

This file was deleted.

Loading

0 comments on commit 3aa49f8

Please sign in to comment.