INNER CODE UNIT · Go

secretPluginMap

apache/apisix-ingress-controller · api/adc/redaction_test.go:46

func secretPluginMap() map[string]any {
	return map[string]any{
		"kafka-logger": map[string]any{"sasl_config": map[string]any{"password": secretPluginValue}},
		"http-logger":  map[string]any{"uri": "http://logs.example"},
	}
}

// Plugin config is arbitrary user JSON that routinely carries credentials, so
// no plugin map may reach the log sink whole.
func TestPluginMapsMarshalLogEmitNamesOnly(t *testing.T) {
	for name, value := range map[string]any{
		"plugins":        Plugins(secretPluginMap()),
		"globalRules":    GlobalRule(secretPluginMap()),
		"pluginMetadata": PluginMetadata(secretPluginMap()),
	} {
		t.Run(name, func(t *testing.T) {
			var buf bytes.Buffer
			bufferLogger(&buf).V(1).Info("site", name, value)

View source record →