Skip to content

Commit b7e5100

Browse files
myasnikovdaniilmyasnikovdaniil
authored
fix(monitoring): strip infrastructure metadata from tenant logs (#2196)
## Summary - Adds a `modify` filter in fluent-bit that removes `kubernetes_node_name` and `kubernetes_host` from all container logs - Prevents infrastructure topology (node names, hosts) from leaking to tenant users ## Problem `kubernetes_node_name` is exposed in log metadata, leaking node topology to end-users. Other sensitive fields like `kubernetes_host` are also visible. Relates to #2194 ## Test plan - [ ] `helm template` monitoring-agents and verify `Remove kubernetes_node_name` filter is present - [ ] Deploy and verify `kubernetes_node_name` is absent from logs in tenant Grafana ```release-note Strip infrastructure metadata (node name, host) from tenant logs ``` 🤖 Generated with [Claude Code](https://claude.com/claude-code) <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Improved Kubernetes monitoring log processing by filtering out most `kubernetes_*` fields for `kube.*` events, while preserving the key Kubernetes identity fields (such as pod, namespace, and container-related names) for clearer, more consistent log output. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
2 parents 7786f72 + 0356cde commit b7e5100

1 file changed

Lines changed: 16 additions & 0 deletions

File tree

‎packages/system/monitoring-agents/values.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -450,6 +450,22 @@ fluent-bit:
450450
Name modify
451451
Match *
452452
Add cluster root-cluster
453+
[FILTER]
454+
Name modify
455+
Match kube.*
456+
Rename kubernetes_pod_name keep_kubernetes_pod_name
457+
Rename kubernetes_namespace_name keep_kubernetes_namespace_name
458+
Rename kubernetes_container_name keep_kubernetes_container_name
459+
[FILTER]
460+
Name modify
461+
Match kube.*
462+
Remove_wildcard kubernetes_
463+
[FILTER]
464+
Name modify
465+
Match kube.*
466+
Rename keep_kubernetes_pod_name kubernetes_pod_name
467+
Rename keep_kubernetes_namespace_name kubernetes_namespace_name
468+
Rename keep_kubernetes_container_name kubernetes_container_name
453469
scrapeRules:
454470
etcd:
455471
enabled: false

0 commit comments

Comments
 (0)