sigs.k8s.io/cluster-api-provider-azure@v1.17.0/hack/log/redact.sh (about)

     1  #!/usr/bin/env bash
     2  
     3  # Copyright 2020 The Kubernetes Authors.
     4  #
     5  # Licensed under the Apache License, Version 2.0 (the "License");
     6  # you may not use this file except in compliance with the License.
     7  # You may obtain a copy of the License at
     8  #
     9  #     http://www.apache.org/licenses/LICENSE-2.0
    10  #
    11  # Unless required by applicable law or agreed to in writing, software
    12  # distributed under the License is distributed on an "AS IS" BASIS,
    13  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    14  # See the License for the specific language governing permissions and
    15  # limitations under the License.
    16  
    17  set -o errexit
    18  set -o nounset
    19  set -o pipefail
    20  
    21  echo "================ REDACTING LOGS ================"
    22  
    23  log_files=()
    24  while IFS='' read -r line; do log_files+=("$line"); done < <(find "${ARTIFACTS:-${PWD}/_artifacts}" -type f)
    25  redact_vars=(
    26      "${AZURE_CLIENT_ID:-}"
    27      "${AZURE_JSON_B64:-}"
    28      "$(echo -n "${AZURE_CLIENT_SECRET:-}" | base64 | tr -d '\n')"
    29  )
    30  
    31  for log_file in "${log_files[@]}"; do
    32      for redact_var in "${redact_vars[@]}"; do
    33          # LC_CTYPE=C and LANG=C will prevent "illegal byte sequence" error from sed
    34          if [[ "$(uname)" == "Darwin" ]]; then
    35              # sed on Mac OS requires an empty string for -i flag
    36              LC_CTYPE=C LANG=C sed -i "" "s|${redact_var}|===REDACTED===|g" "${log_file}" &> /dev/null || true
    37          else
    38              LC_CTYPE=C LANG=C sed -i "s|${redact_var}|===REDACTED===|g" "${log_file}" &> /dev/null || true
    39          fi
    40      done
    41  done
    42  
    43  echo "All sensitive variables are redacted"