Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OTEL Traces for Database interactions should only optionally include values #2816

Open
endocrimes opened this issue Sep 9, 2024 · 0 comments

Comments

@endocrimes
Copy link
Member

Database queries often contain potentially sensitive data (PII, credentials/api tokens, ...), currently, Spin will always send those values to OTel (example from a sqlite database):

image

This would be a compliance or security issue in some contexts, so ideally we should only do this if a developer opts in for further debugging support (in local/dev envs). Or never emit those values (and instead just include types or similar).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant