nic-6443 opened a new pull request, #13324:
URL: https://github.com/apache/apisix/pull/13324

   During upgrades, when new fields are added to `encrypt_fields`, existing 
plaintext data in etcd will fail to decrypt. This is a normal and expected 
scenario — the plaintext value is preserved as-is and still works. However, the 
`warn`-level log generates noise that may alarm users.
   
   This change:
   - Downgrades decrypt failure log from `warn` to `info`
   - Keeps encrypt failure log at `warn` (those are unexpected)
   - Adds a hint message explaining the likely cause (upgrade) and resolution 
(re-save via Admin API)
   
   Before:
   ```
   [warn] failed to decrypt the conf of plugin [basic-auth] key [password], 
err: decrypt ssl key failed
   ```
   
   After:
   ```
   [info] failed to decrypt the conf of plugin [basic-auth] key [password], 
err: decrypt ssl key failed. This is expected after upgrading if the field was 
recently added to encrypt_fields; re-save the configuration via the Admin API 
to resolve
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to