[FLINK-30306] Audit utils can expose potentially sensitive information

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: kubernetes-operator-1.2.0
• Component/s: Kubernetes Operator
• Assignee: Unassigned
• Reporter: Alexis Sarda-Espinosa
• Created: 05/Dec/22 16:27
• Updated: 22/Feb/23 13:06

Description

I see events being logged by org.apache.flink.kubernetes.operator.listener.AuditUtils along the lines of ">>> Event | Info | SPECCHANGED | UPGRADE change(s) detected". This logs the entire new spec, which can contain sensitive information that has been injected from a Kubernetes secret.