nic-6443 opened a new pull request, #13784:
URL: https://github.com/apache/apisix/pull/13784

   ### Description
   
   The `loki-logger` `headers` field is the documented place for the Loki / 
Grafana Cloud `Authorization` token, and it is copied verbatim into the 
outbound request. But `headers` is not listed in the plugin's `encrypt_fields`, 
so the token is stored in plaintext in etcd and returned unmasked from the 
Admin API — unlike the identically-shaped `elasticsearch-logger` `headers`, 
which is encrypted.
   
   This adds `headers` to `loki-logger`'s `encrypt_fields`, matching 
`elasticsearch-logger`.
   
   ### Checklist
   
   - [x] I have explained the need for this PR and the problem it solves
   - [x] I have explained the changes or the new features added to this PR
   - [x] I have added tests corresponding to this change
   - [x] I have updated the documentation to reflect this change (no doc change 
needed — behavior is at-rest encryption of an existing field)
   - [x] I have verified that this change is backward compatible
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to