fluent-bit: Redact basic auth credentials from fluent-bit logging (#1…

…1308)

This redacts the basic auth credentials from the configured URL that is
displayed when fluent-bit is started, if these are included. Go's
built-in redaction only hides the password, turning a url like
`http://user:[email protected]` into `http://user:[email protected]`.

Fixes #10514

clients/cmd/fluent-bit/out_grafana_loki.go

@@ -63,7 +63,7 @@ func FLBPluginInit(ctx unsafe.Pointer) int {
 
 	level.Info(logger).Log("[flb-go]", "Starting fluent-bit-go-loki", "version", version.Info())
 	paramLogger := log.With(logger, "[flb-go]", "provided parameter")
-	level.Info(paramLogger).Log("URL", conf.clientConfig.URL)
+	level.Info(paramLogger).Log("URL", conf.clientConfig.URL.Redacted())
 	level.Info(paramLogger).Log("TenantID", conf.clientConfig.TenantID)
 	level.Info(paramLogger).Log("BatchWait", fmt.Sprintf("%.3fs", conf.clientConfig.BatchWait.Seconds()))
 	level.Info(paramLogger).Log("BatchSize", conf.clientConfig.BatchSize)