From 94c92f78e5b02c27502f3b9d59b4e194e476a6f4 Mon Sep 17 00:00:00 2001 From: jupblb Date: Thu, 10 Mar 2022 12:59:00 +0100 Subject: [PATCH] Remove apf_fd from httplog Since flowDistinguisher may hold data identifying a user accessing the cluster this can be a source of a PII leak. --- .../k8s.io/apiserver/pkg/server/filters/priority-and-fairness.go | 1 - 1 file changed, 1 deletion(-) diff --git a/staging/src/k8s.io/apiserver/pkg/server/filters/priority-and-fairness.go b/staging/src/k8s.io/apiserver/pkg/server/filters/priority-and-fairness.go index 63db3233d46..5111edf04ee 100644 --- a/staging/src/k8s.io/apiserver/pkg/server/filters/priority-and-fairness.go +++ b/staging/src/k8s.io/apiserver/pkg/server/filters/priority-and-fairness.go @@ -110,7 +110,6 @@ func WithPriorityAndFairness( httplog.AddKeyValue(ctx, "apf_pl", truncateLogField(pl.Name)) httplog.AddKeyValue(ctx, "apf_fs", truncateLogField(fs.Name)) - httplog.AddKeyValue(ctx, "apf_fd", truncateLogField(flowDistinguisher)) } // estimateWork is called, if at all, after noteFn estimateWork := func() flowcontrolrequest.WorkEstimate {