starred/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-11-06 13:10:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

feat(logging): strengthen secret redaction and add admin controls (#12151)

Browse Source
This commit is contained in:
Andras Bacsai
2026-10-13 20:43:19 +02:00
committed by GitHub
parent 9302395063
commit 448dc8ea0a
92 changed files with 4582 additions and 417 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openapi.json
+52 -2
View File
@@ -886,6 +886,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -1512,6 +1516,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -2138,6 +2146,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -2659,6 +2671,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -3160,6 +3176,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -3932,6 +3952,10 @@
"type": "boolean",
"description": "Sort environment variables."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"is_pr_deployments_public_enabled": {
"type": "boolean",
"description": "Make pull request deployments public."
@@ -7418,6 +7442,10 @@
"description": "Healthcheck start period in seconds.",
"minimum": 0,
"default": 5
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values, database passwords, and remote secrets are redacted. Requires team admin permissions."
}
},
"type": "object"
@@ -9112,7 +9140,7 @@
"Databases"
],
"summary": "List backup executions",
"description": "Get all executions for a specific backup configuration.",
"description": "Get all executions for a specific backup configuration. The execution `message` is only returned (redacted) to tokens with the `read:sensitive` or `root` ability; otherwise it is `null`.",
"operationId": "list-backup-executions",
"parameters": [
{
@@ -9158,7 +9186,11 @@
"type": "string"
},
"message": {
"type": "string"
"description": "Redacted execution output. Null unless the token has the `read:sensitive` or `root` ability.",
"type": [
"string",
"null"
]
},
"status": {
"type": "string"
@@ -19657,6 +19689,11 @@
"default": true,
"description": "Escape special characters in labels. By default, $ (and other chars) is escaped. If you want to use env variables inside the labels, turn this off."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"default": true,
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
},
"tags": {
"type": "array",
"items": {
@@ -19984,6 +20021,11 @@
"type": "boolean",
"default": true,
"description": "Escape special characters in labels. By default, $ (and other chars) is escaped. If you want to use env variables inside the labels, turn this off."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"default": true,
"description": "Redact all environment variable values in logs. When false, only locked (shown once) values are redacted. Requires team admin permissions."
}
},
"type": "object"
@@ -24439,6 +24481,10 @@
"use_build_secrets": {
"type": "boolean"
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Hide every environment variable value in logs. When false, only locked values are hidden."
},
"inject_build_args_to_dockerfile": {
"type": "boolean"
},
@@ -25024,6 +25070,10 @@
"type": "boolean",
"description": "The flag to enable the container label escape."
},
"redact_all_env_values_in_logs": {
"type": "boolean",
"description": "Hide every environment variable value in logs. When false, only locked values are hidden."
},
"is_container_label_readonly_enabled": {
"type": "boolean",
"description": "The flag to enable the container label readonly."