Skip to content

fix(webui): remove printing of .env file in entrypoint #527#528

Merged
bziemons merged 1 commit into
rucio:masterfrom
maany:bugfix-527-webui_secret_printing
Jul 20, 2026
Merged

fix(webui): remove printing of .env file in entrypoint #527#528
bziemons merged 1 commit into
rucio:masterfrom
maany:bugfix-527-webui_secret_printing

Conversation

@maany

@maany maany commented Jul 20, 2026

Copy link
Copy Markdown
Member

Stop printing the entire .env file in the webui entrypoint as it may leak secrets to monitoring environments by deleting the cat .env in the entrypoint.

This is the simplest fix to the problem instead of classifying config var's as secrets/open, which will be handled in rucio/webui#753

Closes #527

Stop printing the entire .env file in the webui entrypoint as it may leak secrets to monitoring environments by deleting the `cat .env` in the entrypoint.

This is the simplest fix to the problem instead of classifying config var's as secrets/open, which will be handled in rucio/webui#753

Closes rucio#527
@maany
maany requested a review from bziemons July 20, 2026 12:39
@bziemons
bziemons merged commit 6533e54 into rucio:master Jul 20, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

webui: entrypoint prints .env to stdout, leaking OIDC client secrets and NEXTAUTH_SECRET into pod logs

2 participants