search

hashicorp / hcdiag

hcdiag is a CLI utility that collects and bundles product and platform diagnostics. It supports Consul, Nomad, TFE, and Vault.
Mozilla Public License 2.0
56 stars 8 forks source link

Allow option for redactions in all files in the bundle #341

Open markcampv opened 1 year ago

markcampv commented 1 year ago

What problem would you like to address?
Currently hcdiag only can redact manifest.json and result.json. If users wanted to redact information like IPs/node ids in the product logs and files(like agent.json), there is currently no way to do that.

Who is the audience for this request?
Customers using any product who have sensitive information in their environment

Which HashiCorp products does this affect?
terraform, vault, consul, and nomad

What would the ideal solution look like?
Ideally after the hcdiag is run, having a prompt to have the option to redact all files would be a solution.

What alternatives have you considered?
Possibly have a separate tool that would redact specified files after hcdiag is finished.

How does this impact you?
Currently customers who have sensitive information may need to manually redact information in the files or not use hcdiag.

What are the customer data privacy implications for this request? This would help data privacy for customers by redacting files before sending to support.

Are there any deadlines? Currently no deadline

Is there any additional context?
Add any other context or mockups for the feature request.

aliciaclark1066 commented 1 year ago

@markcampv Thanks for submitting a request! We've received it and will prioritize it when able. The team is focused on some high priority deliverables so it will take some time before we can get to this.