https://garden.io logo
#🌱|help-and-getting-started
Unable to prevent manifest from being added in the log output
# 🌱|help-and-getting-started
m

many-pizza-75746

01/25/2024, 3:55 AM
When running the deploy command with -l=debug or higher log levels, it appears that secrets manifets and sensitive values are being printed to the log output. This was not present in 0.12. Please advise on how to hide particular manifest files and sensitive values when running garden deploy.
m

mammoth-flag-56137

01/25/2024, 4:12 AM
we really would like to continue using -l=silly for our deploys as it makes identifying issues with deploys in ci much easier but we would also not like to expose secrets in ci logs 🙂
q

quaint-dress-831

01/25/2024, 9:24 AM
Hi @many-pizza-75746, I've asked our devs to confirm if this is intended behavior or not.
b

brief-restaurant-63679

01/25/2024, 12:02 PM
Hey all This was indeed added to aid debugging and so that users could see the rendered manifest before being applied. I suppose we can just remove the log statement for now and consider re-introducing when we add proper facilities for masking secrets. Out of curiosity though, are these values present in env variables or in actual K8s secret objects?
b

big-spring-14945

01/25/2024, 2:49 PM
@many-pizza-75746 @mammoth-flag-56137 The fix above is a quick fix, but in the medium term we also want to offer better facilities to mark values as secrets. feel free to share your thoughts on this feature request with us: https://github.com/garden-io/garden/issues/5666
m

mammoth-flag-56137

01/26/2024, 12:02 AM
We create some actual k8s secrets via manifests in garden which dutifully logs those manifests
m

many-pizza-75746

01/29/2024, 12:22 AM
For our use case they are actual K8S secret objects
Is the current garden version still 0.13.23? I still see the k8s manifests being logged on the deployment log.
b

big-spring-14945

01/29/2024, 9:41 AM
@many-pizza-75746 We'll release 0.13.24 soon. If you want to get the updated behaviour already you can update to edge-bonsai