GreptimeTeam/greptimedb

Remove sensitive information from store_addrs in logs

Open

#7,525 opened on Jan 6, 2026

View on GitHub
 (0 comments) (0 reactions) (1 assignee)Rust (495 forks)github user discovery
C-enhancementgood first issuehelp wanted

Repository metrics

Stars
 (6,332 stars)
PR merge metrics
 (PR metrics pending)

Description

What type of enhancement is this?

User experience

What does the enhancement do?

The command line arguments store_addrs may contain sensitive information.

One of the cmd struct: https://github.com/GreptimeTeam/greptimedb/blob/6f86a22e6fc22e0271b62679d6454b859a116519/src/cmd/src/metasrv.rs#L151-L152

We should not log them.

Implementation challenges

Should we distinguish different backends and only escape the sensitive connection string for PostgreSQL/MySQL?

Contributor guide

Research direction
Find all places where `store addrs` is logged and implement a redaction function that hides sensitive parts of connection strings (e.g., passwords) while preserving structure. Consider special handling for PostgreSQL/MySQL vs other backends.
Tech stack
rust
Domain
backenddatabasesecurity
Issue type
Security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
RustGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70