Log Backup Leak GCS Credential

[apollodafoni]

Bug Report

Please answer these questions before submitting your issue. Thanks!

1. Minimal reproduce step (Required)

• do log backup on GCP cluster
• use GCS credential file for permissions

2. What did you expect to see? (Required)

no GCS credential leak

3. What did you see instead (Required)

When using the GCS credential file, the credentials were exposed when adding the log backup task.

2025/03/10 13:49:28.778 +00:00] [INFO] [advancer.go:436] ["added event"] [task="storage:<gcs:<bucket:"pinterest-compaction-test" prefix:"logbackup" CredentialsBlob:"[REDACTED]"type\": \"service_account\",\n \"project_id\": \"qa-infra-dev\",\n \"private_key_id\": \"xxxxx\",\n \"private_key\": \"-----BEGIN PRIVATE KEY-----\\

4. What is your TiDB version? (Required)

9.0.0-master

[apollodafoni]

/severity critical
/component br
/assign @3pointer
/label affects-9.0