Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide --verbose option that does not print sensitive info #684

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

olivergondza
Copy link

@olivergondza olivergondza commented Nov 29, 2024

Description

--verbose-sensitive-output is dangerous to use in production, because the secret values can bubble to ArgoCD UI, archived pod logs, etc, and get exposed to unauthorized personnel.

Introduce --verbose option, that redact all potentially sensitive values inserted into the messages.

That way, secrets are not leaked. Administrators get the much needed "traces" of what was executed, same as the details of the safe values the program have worked with.

Checklist

Please make sure that your PR fulfills the following requirements:

  • Reviewed the guidelines for contributing to this repository
  • The commit message follows the Conventional Commits Guidelines.
  • Tests for the changes have been updated
  • Are you adding dependencies? If so, please run go mod tidy -compat=1.22.7 to ensure only the minimum is pulled in.
  • [n/a] Docs have been added / updated
  • Optional. My organization is added to USERS.md.

Type of Change

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • New tests
  • Build/CI related changes
  • Documentation content changes
  • Other (please describe)

Other information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant