Use HTTP headers for passing CSI secrets

[lgfa29]

Nomad version

Nomad v1.1.6

Operating system and Environment details

N/A

Issue

The Nomad HTTP API takes CSI secrets for the snapshot list and delete endpoints as query params. This can cause them to be written to logs.

Reproduction steps

$ nomad volume snapshot list -secrets 'k=v'

Nomad Client logs (if appropriate)

2021-10-13T17:02:34.603-0400 [ERROR] http: request failed: method=GET path="/v1/volumes/snapshot?per_page=30&secrets=k%3Dv" error="no such plugin" code=500
2021-10-13T17:02:34.603-0400 [DEBUG] http: request complete: method=GET path="/v1/volumes/snapshot?per_page=30&secrets=k%3Dv" duration=1.056939ms

[tgross]

Work-in-progress branch: https://github.com/hashicorp/nomad/compare/csi-api-secrets-headers

[github-actions]

I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.