Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow Oxidized to anonymize configs rather than strip secrets with netconan #3374

Open
ankenyr opened this issue Jan 19, 2025 · 0 comments
Open

Comments

@ankenyr
Copy link

ankenyr commented Jan 19, 2025

Netconan allows for lots of secrets and even IPs to be replaced with anonymized values. These values are helpful for when you want to share configs with "valid" information but do not want to relinquish real keys. It can for example replace IPSec keys with new keys that would work but are not your own actual keys.

This feature would add a new config that is mutually exclusive with the remove_secrets option called anonymize_secrets. When ran a salt will be selected and used with the python application netconan to anonymize the files. Once anonymized they will be forwarded on to the storing process that oxidized uses.

Let me know your thoughts and I will contribute the code myself.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant