Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Provide ability to hide defined annotations in ArgoCD web UI #15693

Open
pasha-codefresh opened this issue Sep 27, 2023 · 2 comments · May be fixed by #18216
Open

Provide ability to hide defined annotations in ArgoCD web UI #15693

pasha-codefresh opened this issue Sep 27, 2023 · 2 comments · May be fixed by #18216
Labels
component:ui User interfaces bugs and enhancements enhancement New feature or request Open Bounty This describes issues with a bounty. security Security related

Comments

@pasha-codefresh
Copy link
Member

Issue Description

We have configured our cluster to run with Docker pull secrets, which creates a secret for each service account (dockercfg).

Normally, ArgoCD hides all secret data using diff.HideSecretData, including the annotation last-applied-configuration (source).

However, when using pull secrets, the dockercfg secret creates an annotation openshift.io/token-secret.value that contains the service account’s access token.

Request

It would be great to have the ability to define a list of annotations that should not be shown in the ArgoCD web UI on the system level. This feature would improve security and privacy for users who are working with secrets and annotations in ArgoCD.
@pasha-codefresh pasha-codefresh added the enhancement New feature or request label Sep 27, 2023
@crenshaw-dev crenshaw-dev added security Security related component:ui User interfaces bugs and enhancements labels Sep 27, 2023
@crenshaw-dev
Copy link
Collaborator

Related: #5201

@crenshaw-dev
Copy link
Collaborator

crenshaw-dev commented Oct 24, 2023 •
edited

A $100 bounty is available for whoever implements this feature!

This is our first feature bounty, so please be patient as we work through the bugs in our system. :-) Bounties will be paid out on Argoproj's behalf by HackerOne and will be subject to the limitations of their payment system.

@crenshaw-dev crenshaw-dev added the Open Bounty This describes issues with a bounty. label Oct 24, 2023
This was referenced May 14, 2024
Draft
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
component:ui User interfaces bugs and enhancements enhancement New feature or request Open Bounty This describes issues with a bounty. security Security related
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat: Add ability to hide certain annotations on secret resources svghadi/argo-cd
2 participants
@crenshaw-dev @pasha-codefresh