[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Matt Sicker updated JENKINS-21670 Jenkins / JENKINS-21670 Option to anonymize customer labels Change By: Matt Sicker Status: In Progress Review Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Matt Sicker updated an issue Jenkins / JENKINS-21670 Option to anonymize customer labels Change By: Matt Sicker Attachment: Screen Shot 2018-05-01 at 3.47.54 PM.png Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Matt Sicker commented on JENKINS-21670 Re: Option to anonymize customer labels Here's a proposed admin console for this feature so far: Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Matt Sicker assigned an issue to Matt Sicker Jenkins / JENKINS-21670 Option to anonymize customer labels Change By: Matt Sicker Assignee: Rebecca Ysteboe Matt Sicker Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Devin Nusbaum commented on JENKINS-21670 Re: Option to anonymize customer labels To make sure that users understand that this feature is not guaranteed to anonymize all uses of confidential information, we should add a warning immediately before the "Generate Bundle" button that explains that the anonymization and encrypted secret masking are best-effort and that users should double-check and redact any confidential information before sending the bundle to a third party. We should also change the description for configuration file components from ... (Encrypted secrets are redacted) to ... (Encrypted secrets are redacted. See the Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Sam Gleske commented on JENKINS-21670 Re: Option to anonymize customer labels User-defined list of expressions to search and replace can help with job names that have no convention. An enterprise may have keywords which they don't want leaked. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan edited a comment on JENKINS-21670 Re: Option to anonymize customer labels [~aheritier] What did you mean by "views"? Jenkins.getInstance().getViewActions() ?Also could you please tell me is there a way to get the information of users/accounts through API? [~jglick] Is this [https://github.com/kohsuke/wordnet-random-name] random word generator available as a maven dependency? Or do we have to add that jar or classes to Support core plug-in project manually? Thanks a lot! Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan edited a comment on JENKINS-21670 Re: Option to anonymize customer labels [~aheritier] What did you mean by " views " ? Jenkins.getInstance().getViewActions() ?Also could you please tell me is there a way to get the information of users/accounts through API?Thanks a lot! Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan commented on JENKINS-21670 Re: Option to anonymize customer labels Arnaud Héritier What did you mean by views? Jenkins.getInstance().getViewActions() ? Also could you please tell me is there a way to get the information of users/accounts through API? Thanks a lot! Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Arnaud Héritier commented on JENKINS-21670 Re: Option to anonymize customer labels Really good question cc Steven Christou As we are running in Jenkins I think that the best is to use its APIs to find all kind of Jobs (Jenkins.instance.getAllItems...) and then to create a map to replace each name. We probably need to do the same for views, users/accounts, After this we need a mechanism of filter when we are getting logs, config files, ... to replace all orginal names by the "protected" value Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan commented on JENKINS-21670 Re: Option to anonymize customer labels Arnaud Héritier Jesse Glick Since the entities like job names does not have a specific format like network addresses do, how to find a string as such a name which is needed to be anatomized? Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan assigned an issue to Minudika Malshan Jenkins / JENKINS-21670 Option to anonymize customer labels Change By: Minudika Malshan Assignee: Steven Christou Minudika Malshan Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Minudika Malshan assigned an issue to Steven Christou Jenkins / JENKINS-21670 Option to anonymize customer labels Change By: Minudika Malshan Assignee: Minudika Malshan Steven Christou Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-21670) Option to anonymize customer labels
Title: Message Title Arnaud Héritier commented on JENKINS-21670 Re: Option to anonymize customer labels Here are more feedbacks of what could be considered as “Sensitive/Non-Public”: 1/ System and network informations : processes, accounts, IPs, hostnames and everything related to the hosting system and its network configuration. -> Current status: Such informations are provided by different bundles options which can be already deactivated (Environment variables, File descriptors (Unix only), Networking Interface, Root CAs, System configuration (Linux only), System properties) but there are probably others places where they should be anonymised 2/ All kind of credentials -> Current status: Never stored in bundles. Should never appear in Jenkins logs (but ...). Should never appear in jobs logs (but ... it can - there are some known issues) but for now no job informations/logs are provided in bundles 3/ All kind of audit logs to know who did what -> Current status: it should be necessary to not bundle the audit plugin logs if it is installed (I don't know it very well thus I need to investigate). 4/ Users informations (Name, emails, logon, ...) -> Provided by option "About user (basic authentication details only)" but we may probably have to anonymise them in more locations Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
