BUG #18969: security tests failures

Started by PG Bug reporting form10 months ago2 messagesbugs
Jump to latest
#1PG Bug reporting form
noreply@postgresql.org

The following bug has been logged on the website:

Bug reference: 18969
Logged by: Sigalit B
Email address: e.sigalit@gmail.com
PostgreSQL version: 17.5
Operating system: Linux
Description:

A container is forbidden to store secrets in environment variables in its
manifest ->
following secret defined as env vars
"POSTGRES_PASSWORD=ZBzEgjlnnbzMH2Ix
REPMGR_PASSWORD=UTwLWESNIMikB18T
POSTGRES_USER=postgres
REPMGR_USERNAME=repmgr"
is this something that can be handled

#2Daniel Gustafsson
daniel@yesql.se
In reply to: PG Bug reporting form (#1)
Re: BUG #18969: security tests failures

On 25 Jun 2025, at 08:15, PG Bug reporting form <noreply@postgresql.org> wrote:

The following bug has been logged on the website:

Bug reference: 18969
Logged by: Sigalit B
Email address: e.sigalit@gmail.com
PostgreSQL version: 17.5
Operating system: Linux
Description:

A container is forbidden to store secrets in environment variables in its
manifest ->
following secret defined as env vars
"POSTGRES_PASSWORD=redacted
REPMGR_PASSWORD=redacted
POSTGRES_USER=postgres
REPMGR_USERNAME=repmgr"
is this something that can be handled

Wherever this came from it is not part of core postgres but most likely
something in your deployment environment. Any questions should be directed at
whomever set that up.

This is a publically archived mailinglist, if what you posted are actual
passwords then I strongly advise you to change them immediately.

--
Daniel Gustafsson