-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
We need configuration logging at info by default. #453
Comments
So I'm wrong. Part of the device configuration is logged at debug. We need it all logged at info.
|
Another thing to be clear on: We should log the file prior to loading any configuration. If we fail to load, the log may help us determine why. |
when you say log the file, do you mean log the info about the file being loaded (e.g. directory, name) or the contents of the file? We already log the info about the file being loaded
|
the device configuration logged at debug level originates in the i2c plugin, so the log level would need to be fixed there |
I think with the PR referenced above, this should be okay to close. @MatthewHink feel free to close if you agree. If theres something here that was missed in the PR, let me know so I can add it. |
I'm going to add more logging here. It's hard to tell what is happening. We don't have the config file contents in the log and the container has died.
|
I'm not sure that we want the config file contents in the logs.. If we do that, theres no way to redact any sensitive info which may be in the config. |
Well then how do we debug this? How do we know the configuration when a bug report is filed? |
I'm not sure what the best way is, it just seems to me like we don't want to be leaking potential passwords in logs. I'd prefer not to, but we could also just have it log out at a low log level and I guess add a disclaimer that debug/trace logs can leak passwords if they are in the config. Maybe thats okay, but it feels weird to me. For bug reports, we could just leave it to the reporter to provide the config with the expectation that sensitive info is stripped out. |
True we do not want to log passwords, but we had this in synse v2 and we had rudimentary redaction.
This is blaming the victim. Don't agree. The question remains: How do we debug this? |
And how do you even know what the config is with all of the templating levels? (helm/helmfile) Please tell me. And how do you get the config file contents when the container has crashed? |
I see debug level log statements, but the configuration is not in the log.
We need the configuration in the log for bug reports since the configuration is complex and the pod may no longer be available.
I had put this in in the past here:
https://github.com/vapor-ware/synse-sdk/pull/115/files
log-snippet.txt
The text was updated successfully, but these errors were encountered: