Skip to content

Commit 9cd330b

Browse files
authored
Make more prominent that only secrets redact secret information (#207)
Signed-off-by: Jose Fuentes <[email protected]>
1 parent 8972f45 commit 9cd330b

File tree

1 file changed

+2
-10
lines changed

1 file changed

+2
-10
lines changed

docs/datagatherers/k8s-dynamic.md

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -77,14 +77,6 @@ Secrets can be gathered using the following config:
7777
resource: secrets
7878
```
7979

80-
Before Secrets are sent to the Preflight backend, they are redacted in the
81-
following way:
80+
Before Secrets are sent to the Preflight backend, they are redacted so no secret data is transmitted. See [`fieldfilter.go`](./../../pkg/datagatherer/k8s/fieldfilter.go) to see the details of which fields are filteres and which ones are redacted.
8281

83-
- `last-applied-configuration` annotation is removed
84-
- For Secrets of type `kubernetes.io/tls`
85-
- All keys under data other than the following are removed:
86-
- tls.crt
87-
- ca.crt
88-
- All other secrets have all keys removed from their data.
89-
90-
**All resource other than Kubernetes Secrets are sent in full.**
82+
> **All resource other than Kubernetes Secrets are sent in full, so make sure that you don't store secret information on arbitrary resources.**

0 commit comments

Comments
 (0)