Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-57990

Avoid filtering contents without sensible data and do per-content anonymization

    • 2.57

      Change the behavior of the Contents to avoid filtering when it's not needed. And change the way it's anonymized by delegating it to the component to avoid losing the structure of the information.

      Should be filtered

      • NodesContent: include labels and filesystem path
      • AboutUser
      • AgentsConfigFile (secrets encrypted but maybe other sensitive info)
      • BuildQueue: name of the job
      • ConfigFileComponent (secrets encrypted but maybe other sensitive info)
      • EnvironmentVariables
      • JenkinsLogs
      • JVMProcessSystemMetricsContent (environment variables)
      • LoggerManager
      • NetworInterfaces (ips)
      • NodeMonitors (computer name)
      • OtherConfigFilesComponent
      • RoocCAs
      • SlaveLaunchLogs
      • SlaveLogs
      • SystemConfiguration Agents and Master (user running)
      • UpdateCenter (proxy information: urls)
      • SystemProperties

      Shouldn’t be filtered

      • AboutContent
      • AboutBrowser
      • ActivePlugins
      • DisabledPlugins
      • FailedPlugins
      • Dockerfile
      • MasterChecksumsContent
      • NodeChecksumsContent
      • AdministrativeMonitors
      • DeadlockRequestComponent
      • DumpExportTable
      • FileDescriptorLimit
      • GCLogs Out of scope, it needs some refactor of classes. To tackle on another ticket Done because i needed the infra for other components.
      • HeapUsageHistogram
      • ItemsContent
      • LoadStats
      • Metrics
      • RemotingDiagnostics
      • ReverseProxy
      • SlaveCommandStatistics
      • SlowRequestComponent
      • ThreadDumps

      Avoid anonymizing the labels, the structure of the files under the control of the plugin (.md files, and information files). Analyze what values should be anonymized.
      The contents generated on the fly are going to extend the PrefilteredContent by creating a new PrefilteredPrintedContent and they are going to filter the information by themselves.

      The ones that are being filtered and shouldn't to will override the shouldBeFiltered method to avoid that.

      Acceptance criteria

      • The support-core plugin is changed by creating a new PrefilteredPrintedContent that extends PrefilteredContent
      • The contents that don't need to be filtered don't do that by overriding shouldBeFiltered (false)
      • Some tests are implemented for:
        • A content that was filtered and now it's not
        • A content that was filtered affecting the structure (markdown) and now it's not affected
      • The PR in support-core is merged

          [JENKINS-57990] Avoid filtering contents without sensible data and do per-content anonymization

          Ramon Leon created issue -
          Ramon Leon made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Ramon Leon made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Ramon Leon made changes -
          Remote Link New: This issue links to "PR #174 (Web Link)" [ 23111 ]
          Ramon Leon made changes -
          Description Original: Change the behavior of the {{Contents}} to avoid filtering when it's not needed. And change the way it's anonymized by delegating it to the component to avoid losing the structure of the information.

          *Should be filtered*
           * NodesContent: include labels and filesystem path

           * AboutUser

           * AgentsConfigFile (secrets encrypted but maybe other sensitive info)

           * BuildQueue: name of the job

           * ConfigFileComponent (secrets encrypted but maybe other sensitive info)

           * EnvironmentVariables

           * JenkinsLogs

           * JVMProcessSystemMetricsContent (environment variables)

           * LoggerManager

           * NetworInterfaces (ips)

           * NodeMonitors (computer name)

           * OtherConfigFilesComponent

           * RoocCAs

           * SlaveLaunchLogs

           * SlaveLogs

           * SystemConfiguration Agents and Master (user running)

           * UpdateCenter (proxy information: urls)

           * SystemProperties

          *Shouldn’t be filtered*
           * AboutContent

           * AboutBrowser

           * ActivePlugins

           * DisabledPlugins

           * FailedPlugins

           * Dockerfile

           * MasterChecksumsContent

           * NodeChecksumsContent

           * AdministrativeMonitors

           * DeadlockRequestComponent

           * DumpExportTable

           * FileDescriptorLimit

           * GCLogs Out of scope, it needs some refactor of classes. To tackle on another ticket

           * HeapUsageHistogram

           * ItemsContent

           * LoadStats

           * Metrics

           * RemotingDiagnostics

           * ReverseProxy

           * SlaveCommandStatistics

           * SlowRequestComponent

           * ThreadDumps

          Avoid anonymizing the labels, the structure of the files under the control of the plugin (.md files, and information files). Analyze what values should be anonymized.
          The contents generated on the fly are going to extend the PrefilteredContent by creating a new *PrefilteredPrintedContent* and they are going to filter the information by themselves.

          The ones that are being filtered and shouldn't to will override the {{shouldBeFiltered}} method to avoid that.
          h3. Acceptance criteria
           * The support-core plugin is changed by creating a new {{PrefilteredPrintedContent}} that extends {{PrefilteredContent}}

           * The contents that don't need to be filtered don't do that by overriding {{shouldBeFiltered}} (false)

           * The contents that need to be filtered extends from a {{PrefilteredContent}}, most likely {{PrefilteredPrintedContent}} and do the filtering by themselves implementing the new {{writeTo}} method. Look at: [https://github.com/jenkinsci/support-core-plugin/blob/e2d79249818d41111ea96979a710ac3404018f78/src/main/java/com/cloudbees/jenkins/support/api/StringContent.java#L58] avoiding to filter the structure of the markdown or whatever is going to affect the comprehension of the content.

           * Some tests are implemented for:

           ** A content that was filtered and now it's not

           ** A content that was filtered affecting the structure (markdown) and now it's not affected

           * The PR in support-core is merged
          New: Change the behavior of the {{Contents}} to avoid filtering when it's not needed. And change the way it's anonymized by delegating it to the component to avoid losing the structure of the information.

          *Should be filtered*
           * NodesContent: include labels and filesystem path

           * AboutUser

           * AgentsConfigFile (secrets encrypted but maybe other sensitive info)

           * BuildQueue: name of the job

           * ConfigFileComponent (secrets encrypted but maybe other sensitive info)

           * EnvironmentVariables

           * JenkinsLogs

           * JVMProcessSystemMetricsContent (environment variables)

           * LoggerManager

           * NetworInterfaces (ips)

           * NodeMonitors (computer name)

           * OtherConfigFilesComponent

           * RoocCAs

           * SlaveLaunchLogs

           * SlaveLogs

           * SystemConfiguration Agents and Master (user running)

           * UpdateCenter (proxy information: urls)

           * SystemProperties

          *Shouldn’t be filtered*
           * AboutContent

           * AboutBrowser

           * ActivePlugins

           * DisabledPlugins

           * FailedPlugins

           * Dockerfile

           * MasterChecksumsContent

           * NodeChecksumsContent

           * AdministrativeMonitors

           * DeadlockRequestComponent

           * DumpExportTable

           * FileDescriptorLimit

           * GCLogs -Out of scope, it needs some refactor of classes. To tackle on another ticket- Done because i needed the infra for other components.

           * HeapUsageHistogram

           * ItemsContent

           * LoadStats

           * Metrics

           * RemotingDiagnostics

           * ReverseProxy

           * SlaveCommandStatistics

           * SlowRequestComponent

           * ThreadDumps

          Avoid anonymizing the labels, the structure of the files under the control of the plugin (.md files, and information files). Analyze what values should be anonymized.
           The contents generated on the fly are going to extend the PrefilteredContent by creating a new *PrefilteredPrintedContent* and they are going to filter the information by themselves.

          The ones that are being filtered and shouldn't to will override the {{shouldBeFiltered}} method to avoid that.
          h3. Acceptance criteria
           * The support-core plugin is changed by creating a new {{PrefilteredPrintedContent}} that extends {{PrefilteredContent}}

           * The contents that don't need to be filtered don't do that by overriding {{shouldBeFiltered}} (false)

           * The contents that need to be filtered extends from a {{PrefilteredContent}}, most likely {{PrefilteredPrintedContent}} and do the filtering by themselves implementing the new {{writeTo}} method. Look at: [https://github.com/jenkinsci/support-core-plugin/blob/e2d79249818d41111ea96979a710ac3404018f78/src/main/java/com/cloudbees/jenkins/support/api/StringContent.java#L58] avoiding to filter the structure of the markdown or whatever is going to affect the comprehension of the content.

           * Some tests are implemented for:

           *
           ** A content that was filtered and now it's not

           *
           ** A content that was filtered affecting the structure (markdown) and now it's not affected

           * The PR in support-core is merged
          Ramon Leon made changes -
          Released As New: 2.57
          Resolution New: Done [ 10000 ]
          Status Original: In Review [ 10005 ] New: Resolved [ 5 ]
          Arnaud Héritier made changes -
          Status Original: Resolved [ 5 ] New: Closed [ 6 ]
          Allan BURDAJEWICZ made changes -
          Link New: This issue duplicates JENKINS-57217 [ JENKINS-57217 ]

            mramonleon Ramon Leon
            mramonleon Ramon Leon
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: