BUG #18969: security tests failures
The following bug has been logged on the website:
Bug reference: 18969
Logged by: Sigalit B
Email address: e.sigalit@gmail.com
PostgreSQL version: 17.5
Operating system: Linux
Description:
A container is forbidden to store secrets in environment variables in its
manifest ->
following secret defined as env vars
"POSTGRES_PASSWORD=ZBzEgjlnnbzMH2Ix
REPMGR_PASSWORD=UTwLWESNIMikB18T
POSTGRES_USER=postgres
REPMGR_USERNAME=repmgr"
is this something that can be handled
On 25 Jun 2025, at 08:15, PG Bug reporting form <noreply@postgresql.org> wrote:
The following bug has been logged on the website:
Bug reference: 18969
Logged by: Sigalit B
Email address: e.sigalit@gmail.com
PostgreSQL version: 17.5
Operating system: Linux
Description:A container is forbidden to store secrets in environment variables in its
manifest ->
following secret defined as env vars
"POSTGRES_PASSWORD=redacted
REPMGR_PASSWORD=redacted
POSTGRES_USER=postgres
REPMGR_USERNAME=repmgr"
is this something that can be handled
Wherever this came from it is not part of core postgres but most likely
something in your deployment environment. Any questions should be directed at
whomever set that up.
This is a publically archived mailinglist, if what you posted are actual
passwords then I strongly advise you to change them immediately.
--
Daniel Gustafsson