feat: enable Konnect config dumps sanitization by default

Kong · Feb 6, 2024 · 0d0fbd2 · 0d0fbd2
1 parent cf99004
commit 0d0fbd2
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -161,8 +161,10 @@ Adding a new version? You'll need three changes:
  to Konnect.
  [#5453](https:/Kong/kubernetes-ingress-controller/pull/5453)
 - Added `SanitizeKonnectConfigDumps` feature gate allowing to enable sanitizing
- sensitive data in Konnect configuration dumps.
+ sensitive data (like TLS private keys, Secret-sourced Plugins configuration, etc.) 
+ in Konnect configuration dumps. It's turned on by default.
  [#5489](https:/Kong/kubernetes-ingress-controller/pull/5489)
+ [#5573](https:/Kong/kubernetes-ingress-controller/pull/5573)
 - Kong Plugin's `config` field now is sanitized when it contains sensitive data
  sourced from a Secret (i.e. `configFrom` or `configPatches` is used).
  [#5495](https:/Kong/kubernetes-ingress-controller/pull/5495)

diff --git a/FEATURE_GATES.md b/FEATURE_GATES.md
@@ -69,7 +69,7 @@ Features that reach GA and over time become stable will be removed from this tab
 | FillIDs | `true` | Beta | 3.0.0 | TBD |
 | RewriteURIs | `false` | Alpha | 2.12.0 | TBD |
 | KongServiceFacade | `false` | Alpha | 3.1.0 | TBD |
-| SanitizeKonnectConfigDumps | `false` | Alpha | 3.1.0 | TBD |
+| SanitizeKonnectConfigDumps | `true`  | Alpha | 3.1.0 | TBD |
 
 **NOTE**: The `Gateway` feature gate refers to [Gateway
  API](https:/kubernetes-sigs/gateway-api) APIs which are in

diff --git a/internal/manager/featuregates/feature_gates.go b/internal/manager/featuregates/feature_gates.go
@@ -67,6 +67,6 @@ func GetFeatureGatesDefaults() FeatureGates {
  FillIDsFeature: true,
  RewriteURIsFeature: false,
  KongServiceFacade: false,
- SanitizeKonnectConfigDumps: false,
+ SanitizeKonnectConfigDumps: true,
  }
 }