Comments (3)
Kevin Ngo (kevin-v-ngo) commented:
Hi Florence Morris, assigning this to you. Should be a relatively small update where we need to provide guidance on redaction. If the default redaction behavior and policies do not meet requirements, we recommend users to use downstream logging system (with redactable markers) to redact.
from docs.
Florence Morris (florence-crl) commented:
Hi Kevin Ngo , would you be able to give an example how “the default redaction and policies do not meet requirements”? And how using downstream logging system (with redactable markers) to redact?
From my testing, an example log line with {{logs.yaml}}
defaults (redact: false, redactable: true):
{{+- Your cluster is open to any client that can access ‹localhost›.}}
redact: true (redactable: true):
{{+- Your cluster is open to any client that can access ‹×›.}}
redact: true, redactable: false
{{ +- Your cluster is open to any client that can access ×.}}
from docs.
Kevin Ngo (kevin-v-ngo) commented:
We shouldn’t provide examples on how to redact using third party tools (similar to third party monitoring tools). Users should already know how to use their downstream tools to identify the redactable markers <> for fields they need to redact.
For this doc issue, its sufficient to just say something along the lines of:
If the default redaction behavior and policies do not meet redaction requirements, we recommend users to use downstream logging system (with redactable markers) to redact.
from docs.
Related Issues (20)
- Feedback: Feedback: Functions and Operators - crypt function missing implementation details
- TEST: testing issue
- Feedback: cockroach start - incorrect statement about --join flag
- Feedback: Physical Cluster Replication - wrong cluster specified for pausing or canceling schedule on changefeeds after cutover HOT 8
- Document `SHOW BACKUP CONNECTION <location>`
- Feedback: CockroachDB Cloud Access Management (Authorization) Overview - missing info for Cluster Operator role about controlling network access (such as IP allowlisting)
- Feedback: Production Checklist HOT 2
- Feedback: Troubleshoot Self-Hosted Setup - Replication issues HOT 1
- Shannon testing HOT 2
- Feedback: Use Math Powers to describe INT ranges of values.
- Feedback: Take and Restore Encrypted Backups: needs more details about GCM implementation
- Feedback: Cluster Single Sign-on (SSO) using JSON web tokens (JWTs)
- document new close_cursors_at_commit session variable
- Feedback: What's New in v23.2
- Feedback: Node Shutdown HOT 1
- Test issue
- Testing
- server: no description of server.consistency_check.interval
- Feedback: Authorization in CockroachDB
- pcr: remove ccluster=main from connection strings
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docs.