From 27ff9dfda3bb718fa894f0e128cca154580fa1b0 Mon Sep 17 00:00:00 2001 From: Alexander Kukushkin Date: Fri, 24 Jan 2020 10:52:23 +0100 Subject: [PATCH] Avoid logging passwords on user creation (#1370) Fixes https://github.com/zalando/patroni/issues/1365 --- patroni/postgresql/bootstrap.py | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/patroni/postgresql/bootstrap.py b/patroni/postgresql/bootstrap.py index 16266c70..a1e7dd52 100644 --- a/patroni/postgresql/bootstrap.py +++ b/patroni/postgresql/bootstrap.py @@ -310,7 +310,15 @@ BEGIN CREATE ROLE "{0}" WITH {1}; END IF; END;$$""".format(name, ' '.join(options)) - self._postgresql.query(sql, *params) + self._postgresql.query('SET log_statement TO none') + self._postgresql.query('SET log_min_duration_statement TO -1') + self._postgresql.query("SET log_min_error_statement TO 'log'") + try: + self._postgresql.query(sql, *params) + finally: + self._postgresql.query('RESET log_min_error_statement') + self._postgresql.query('RESET log_min_duration_statement') + self._postgresql.query('RESET log_statement') def post_bootstrap(self, config, task): try: