Adding additional filtering options for URLs in logs

[pr0ton11]

What would you like to be added

In src/app/backend/handler/filter.go, the function checkSensitiveURL() checks for sensitive URLs and filters log entries potentially exposing secrets to the log.

This function could be extended by adding URLs for Kubernetes secrets, or even filtering for potential password fields.

• /api/v1/_raw/secrets
• filtering (for example with a regex) for exposed password fields

Why is this needed

In our use case, the dashboard exposes secrets (passwords, API keys) of user applications in the log files in plain text, because the full put request (all JSON) is logged.

Comments

[flarno11]

Or an option to not log any body payload would be very useful.

[floreks]

/reopen /lifecycle frozen