Rancher HA default log levels

Rancher 1.x
1

Hi guys!

I just deployed the latest version of Rancher HA server and configure the docker containers log driver to sent data to an external log system the problem is that by default Rancher HA logs at info level. I was wondering if there is a way to change the levels to warn or error and do not expose some sensible data like e.g. when it run the following command, it expose a lot of sensible information about the database connection as info log level:

/usr/bin/entry --db-host XXX --db-name XXX --db-port XXX --db-user XXX --db-pass XXX --advertise-address XXX

Thanks,

2

I believe that log entry I’m seeing it’s coming from https://github.com/rancher/rancher/blob/9fb7750a1a9e83e8a49f58a92020f8b42941b5a5/server/bin/entry

3

Ok I have remove the shell stdout running the Rancher server like:

docker run -d --name=rancher-ha-server -p 8080:8080 -p 9345:9345 --entrypoint /bin/sh rancher/server -c "/usr/bin/entry /usr/bin/s6-svscan /service > /dev/null"

Making use of > /dev/null redirects stdout to null however I’m still seeing internal Rancher info logs that I would like to remove and just show warn levels

4

Not sure anymore it’s a problem related with the log level despite the fact that I could configure it to just log warn log level I think it will still show sensible data even for fatal log level like on this log entry example:

Screen_Shot_2017-04-27_at_14_34_17.png2824×1270 282 KB

Were you can see the db user password URL etc…

5

I have created an issue to follow up this problem jtlyk this is the link https://github.com/rancher/rancher/issues/8605