When the nebula-console software is used, the plaintext password is leaked by running the ps -ef command

[cccxgit]

In the startup script of the storaged service container, the nebula-console software is used to perform the add host operation. Also, when I developed the k8s probe, I also used the nebula-console software to check the node serviceability and status.

This has the risk of compromising plaintext password security. When you run the ps -ef command to view the process information, the plaintext password is displayed.

UID   PID  PPID       C  STIME  TTY     TIME      CMD
root  33235 32818  0 21:58    pts/1 00:00:00   nebula-console --addr infinitygraph-graphd-headless --port 8888 -u root -p xxxxxxx