diff --git a/CHANGELOG.md b/CHANGELOG.md index 9085ca78827..e48c2bdf5de 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -161,8 +161,10 @@ Adding a new version? You'll need three changes: to Konnect. [#5453](https://github.com/Kong/kubernetes-ingress-controller/pull/5453) - Added `SanitizeKonnectConfigDumps` feature gate allowing to enable sanitizing - sensitive data in Konnect configuration dumps. + sensitive data (like TLS private keys, Secret-sourced Plugins configuration, etc.) + in Konnect configuration dumps. It's turned on by default. [#5489](https://github.com/Kong/kubernetes-ingress-controller/pull/5489) + [#5573](https://github.com/Kong/kubernetes-ingress-controller/pull/5573) - Kong Plugin's `config` field now is sanitized when it contains sensitive data sourced from a Secret (i.e. `configFrom` or `configPatches` is used). [#5495](https://github.com/Kong/kubernetes-ingress-controller/pull/5495) diff --git a/FEATURE_GATES.md b/FEATURE_GATES.md index b003bbb3a73..29de4951ef3 100644 --- a/FEATURE_GATES.md +++ b/FEATURE_GATES.md @@ -69,7 +69,7 @@ Features that reach GA and over time become stable will be removed from this tab | FillIDs | `true` | Beta | 3.0.0 | TBD | | RewriteURIs | `false` | Alpha | 2.12.0 | TBD | | KongServiceFacade | `false` | Alpha | 3.1.0 | TBD | -| SanitizeKonnectConfigDumps | `false` | Alpha | 3.1.0 | TBD | +| SanitizeKonnectConfigDumps | `true` | Alpha | 3.1.0 | TBD | **NOTE**: The `Gateway` feature gate refers to [Gateway API](https://github.com/kubernetes-sigs/gateway-api) APIs which are in diff --git a/internal/manager/featuregates/feature_gates.go b/internal/manager/featuregates/feature_gates.go index 569350674c7..a1a0f7c5f67 100644 --- a/internal/manager/featuregates/feature_gates.go +++ b/internal/manager/featuregates/feature_gates.go @@ -67,6 +67,6 @@ func GetFeatureGatesDefaults() FeatureGates { FillIDsFeature: true, RewriteURIsFeature: false, KongServiceFacade: false, - SanitizeKonnectConfigDumps: false, + SanitizeKonnectConfigDumps: true, } }