[go: up one dir, main page]

Skip to content

Automatically redact logs when GitLab instance is in FIPS mode

Proposal

GitLab should redact logs automatically when an instance is in FIPS mode in order to keep sensitive data such as usernames, email addresses, IP addresses, and domain names from being logged. Ideally this could be configured with some granularity in a future iteration so customers can choose what to include and exclude in logs.

Many customers, namely US government customers, have data secrecy requirements that prohibit them from sharing logs with this information. Due to these restrictions, these customers are either not permitted to share logs with Support, or the admin must redact logs themselves before sharing with us. Manual redaction is often incomplete/imperfect so protected information can still leak, leading Support to have to redact tickets and leaving GitLab admins to follow their internal data leakage procedures. If possible, this should be avoided.

Additionally, this feature may permit more organizations to be able to share logs with Support, improving customer experience, Support experience, and lowering time to resolution.