Repository navigation
feat: sensitive data encryption - #1849
Merged
Merged
Conversation
* feat: mask encrypted config values in SCT logs Keep plaintext out of refresh and group-load logs by tracking encrypted keys and replacing values with length plus a per-process salted fingerprint. Co-authored-by: Cursor <cursoragent@cursor.com> * fix: keep config fallback and polarisconfig endpoint usable Serialize actuator polarisconfig as safe DTOs so ClientId is reachable, honor local-file-root-path for remote cache, and continue startup from existing cache when the config server is unreachable. Co-authored-by: Cursor <cursoragent@cursor.com> * fix: attribute encrypted config by file for logs and ACK Pass EffectiveValue.sourceFile to the SDK, register keys from ConfigKVFile.isEncrypted() on group add, and omit group DEBUG maps only when the composite file is encrypted. Co-authored-by: Cursor <cursoragent@cursor.com> * fix: mark non-Polaris effective values as EXTERNAL Tell the SDK that command-line and env overrides are not config-center files, so ACK can keep those effective values when an encrypted file is also watched. Co-authored-by: Cursor <cursoragent@cursor.com> * chore(docs): 更新 CHANGELOG 链接至 PR 1818 Signed-off-by: evelynwei <evelynwei@tencent.com> * refactor: hide test-only encrypted key set reset Keep clearEncryptedPropertyKeys() package-private so it is not part of the public API. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Signed-off-by: evelynwei <evelynwei@tencent.com> Co-authored-by: evelynwei <evelynwei@tencent.com> Co-authored-by: Cursor <cursoragent@cursor.com>
Co-Authored-By: Codex Signed-off-by: fuyuwei01 <fuyuwei01@qq.com>
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## 2021 #1849 +/- ##
============================================
+ Coverage 56.23% 56.50% +0.27%
Complexity 149 149
============================================
Files 481 481
Lines 14074 14226 +152
Branches 1754 1783 +29
============================================
+ Hits 7914 8038 +124
- Misses 5520 5531 +11
- Partials 640 657 +17 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Keep plaintext out of refresh and group-load logs by tracking encrypted keys and replacing values with length plus a per-process salted fingerprint.
Serialize actuator polarisconfig as safe DTOs so ClientId is reachable, honor local-file-root-path for remote cache, and continue startup from existing cache when the config server is unreachable.
Pass EffectiveValue.sourceFile to the SDK, register keys from ConfigKVFile.isEncrypted() on group add, and omit group DEBUG maps only when the composite file is encrypted.
Tell the SDK that command-line and env overrides are not config-center files, so ACK can keep those effective values when an encrypted file is also watched.
chore(docs): 更新 CHANGELOG 链接至 PR 1818
refactor: hide test-only encrypted key set reset
Keep clearEncryptedPropertyKeys() package-private so it is not part of the public API.
PR Type
Describe what this PR does for and how you did.
Adding the issue link (#xxx) if possible.
Note
Checklist