kubeshark / kubeshark

The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
https://kubeshark.co
Apache License 2.0
11.06k stars 473 forks source link

No disabling redaction anymore ? #1296

Open Gby56 opened 1 year ago

Gby56 commented 1 year ago

Hi, I have tried Mizu a while ago and there was a way to disable redaction, I can't find that option anymore, anywhere. Is that even possible anymore ? it should be added back in, or documented ! Thanks !

Gby56 commented 1 year ago

@mertyildiran I see it was removed 3 weeks ago https://github.com/kubeshark/kubeshark/commit/0a5343299c41de498d05f0f264ee5bc7f532f8d1

alongir commented 1 year ago

@Gby56 I can confirm that due to the architecture change done in V38.0, the redaction capability was removed. Hence, at this time, there is no need to disable it. We are evaluating whether to bring the redaction capability back. If you have an opinion on the matter, please share.

Gby56 commented 1 year ago

Thanks a lot for the answer ! That makes it clear, it's not a problem not having the feature, although it was quite cool for auditing/exploring, I use kubeshark in a threat modeling use-case

alongir commented 1 year ago

The threat modeling use-case does sound interesting! I'm curious what we need to do to better support it. [As for the redaction - If we see demand for redaction, we are likely to return it. ]