Secret contents must be invisible in any relation data

[gatici]

Steps to reproduce

Follow the how-to to integrate opensearch with azure object storage integrator.

juju deploy azure-storage-integrator --channel latest/edge
juju config azure-storage-integrator storage-account=<Azure_storage_account> container=<Azure_storage_container>
juju add-secret mysecret secret-key=<Azure_storage_key>
juju grant-secret mysecret azure-storage-integrator
juju config azure-storage-integrator credentials=
juju integrate azure-storage-integrator opensearch

Check relation databag using jhack and check the secret-key field.

The secret-key includes the plain text secret.

Expected behavior

The secret key should include a secret-uri instead of plaintext secret.

Actual behavior

Versions

Operating system: ubuntu 24.04

Juju CLI:

Juju agent: 3.5.7

Charm revision: opensearch rev: 274

LXD: 5.21.4

Log output

Juju debug log:

Additional context

[syncronize-issues-to-jira]

Thank you for reporting your feedback to us!

The internal ticket has been created: https://warthogs.atlassian.net/browse/DPE-8394.

This message was autogenerated