Hides the password output in logs when pgaudit is enabled

[kviset]

Patroni logging superuser, replication and rewind passwords in logs when PostgreSQL extensions PGAUDIT enabled.

patroni.yaml:

bootstrap:
  dcs:
    postgresql:
      parameters:
        shared_preload_libraries: pgaudit
        log_destination: "stderr"
        logging_collector: 'off'
        pgaudit.log_catalog: 'off'
        pgaudit.log: "ROLE,FUNCTION,DDL"
        pgaudit.log_relation: 'on'
        pgaudit.log_parameter: 'on'
postgresql:
  authentication:
    replication:
      username: replicator
      password: password
    superuser:  
      username: postgres
      password: password
    rewind:
      username: rewind
      password: password

Logs:

2024-10-02 08:17:40 UTC postgres@postgres 127.0.0.1(44328) [34]:LOG:  connection authorized: user=postgres database=postgres appli>
2024-10-02 08:17:40 UTC postgres@postgres 127.0.0.1(44328) [34]:LOG:  AUDIT: SESSION,1,1,FUNCTION,DO,,,"DO $$
        BEGIN
            SET local synchronous_commit = 'local';
            PERFORM * FROM pg_catalog.pg_authid WHERE rolname = 'postgres';
            IF FOUND THEN
                ALTER ROLE ""postgres"" WITH SUPERUSER LOGIN PASSWORD 'password';
            ELSE
                CREATE ROLE ""postgres"" WITH SUPERUSER LOGIN PASSWORD 'password';
            END IF;
        END;$$",<none>

[coveralls]

Pull Request Test Coverage Report for Build 11141084501

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 2 of 2 (100.0%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.001%) to 99.875%

---

Totals
Change from base Build 11068112303:	0.001%
Covered Lines:	14326
Relevant Lines:	14344

---

💛 - Coveralls