Skip to content

Conversation

@edysli
Copy link
Contributor

@edysli edysli commented Oct 4, 2022

Update the recommended logging configuration to reduce the risk of people enabling DEBUG level on the root logger, thereby potentially exposing secrets in HTTP traffic, and being swamped by log data. The example logback-test.xml now disables Apache HTTP client wire logging and shows how to enable debug logging only for Testcontainers.

Fixes #4913

@edysli edysli requested a review from a team October 4, 2022 22:16
@edysli
Copy link
Contributor Author

edysli commented Oct 4, 2022

There are other instances of logback-test.xml in docs/examples/. @rnorth should these be updated as well?

@kiview
Copy link
Member

kiview commented Oct 5, 2022

Thanks for the PR @edysli. The other instances are what is the effective configuration when developing testcontainers-java, I don't think we necessarily need to touch those.

edysli and others added 3 commits October 5, 2022 21:24
Apache HTTP client's wire logger produces a large amount of log data,
which can include secrets. Therefore recommend turning it off, so that
it won't become enabled in case the root logger's level is increased
to DEBUG.

Fixes testcontainers#4913
Add an example showing how to enable debug logging only for the
`org.testcontainers` package. Recommend against enabling debug level
on the root logger in order to not be swamped by log data.

Fixes testcontainers#4913
Co-authored-by: Kevin Wittek <[email protected]>
@edysli
Copy link
Contributor Author

edysli commented Oct 5, 2022

The CircleCI action failed with:

Exception in thread "main" java.io.IOException: Downloading from https://services.gradle.org/distributions/gradle-7.5.1-all.zip failed: timeout
[...]
Caused by: java.net.SocketTimeoutException: Connect timed out

:(
Is there a way to rerun that action?

@edysli edysli requested a review from kiview October 5, 2022 19:32
@eddumelendez eddumelendez added this to the next milestone Oct 5, 2022
@eddumelendez eddumelendez merged commit 478b049 into testcontainers:main Oct 5, 2022
@eddumelendez
Copy link
Member

thanks for your contribution @edysli ! This is now merged in main branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update documentation with recommended logback config to avoid risk of DEBUG level logs exposing user credentials

3 participants