Skip to content

[CLI-1776, RCCA-8029] Add --unsafe-trace flag#1400

Merged
Brian Strauch (brianstrauch) merged 7 commits intomainfrom
unsafe-trace
Aug 18, 2022
Merged

[CLI-1776, RCCA-8029] Add --unsafe-trace flag#1400
Brian Strauch (brianstrauch) merged 7 commits intomainfrom
unsafe-trace

Conversation

@brianstrauch

Checklist

  1. [CRUCIAL] Is the change for CP or CCloud functionalities that are already live in prod?
    • yes: ok

What

Add a new global flag, --unsafe-trace, which prints trace logs to the terminal (equivalent to -vvvv) and debug-level output from ccloud-sdk-go-v2 and retryablehttp, which both could print secrets.

Additionally, -vvv and -vvvv no longer print potentially insecure HTTP request/response information, which is a breaking change. Since this is a fix for a SEV-2, it's OK to make this breaking change.

Also made a few small refactors to ccloudv2.NewClient().

References

Discussion: https://confluent.slack.com/archives/C03Q5LDR4TG/p1658438531342239

Test & Review

Unit tests, integration tests, manual testing

@brianstrauch Brian Strauch (brianstrauch) requested a review from a team as a code owner August 15, 2022 22:15
@brianstrauch Brian Strauch (brianstrauch) changed the title [RCCA-8029] Add --unsafe-trace flag [CLI-1776, RCCA-8029] Add --unsafe-trace flag Aug 15, 2022
Copy link
Contributor

@DABH David Hyde (DABH) left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A couple questions on this one

Copy link
Contributor

@DABH David Hyde (DABH) left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok up to comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants