Sanitize node configs via script, and do it automatically in a Git hook #635

2026-07-05T15:24:11Z

raucao commented

2026-07-05 15:24:11 +00:00

Adds a new util script for sanitizing node config JSON files (requires jq), and a pre-commit hook that runs it on staged files in nodes/ and asks to re-stage the files in case they have been sanitized by the hook.

Check the README change for adding the hook on your machine(s).

Adds a new util script for sanitizing node config JSON files (requires `jq`), and a pre-commit hook that runs it on staged files in `nodes/` and asks to re-stage the files in case they have been sanitized by the hook. Check the README change for adding the hook on your machine(s).

raucao added the dev environment kredits-2 security labels 2026-07-05 15:24:11 +00:00

raucao added 4 commits 2026-07-05 15:24:12 +00:00

Add util script for sanitizing nodes 6c3da8a711

Deletes the "override" and "default" properties, which may contain
sensitive data

Add pre-commit hook for sanitizing node configs 8c71261fc9

Remove newline from all node files 959d506cfb

Was actually added by manually editing the files, but Chef writes them
without newline, so our sanitization script also does it that way

Remove decommissioned nodes 53cf95c4e7

raucao requested review from greg 2026-07-05 15:24:38 +00:00

raucao removed review request for greg 2026-07-05 15:26:03 +00:00

raucao merged commit c762dfe8c1 into feature/prometheus_cookbook

2026-07-05 15:26:31 +00:00

raucao deleted branch dev/sanitize_node_configs

2026-07-05 15:26:31 +00:00

greg reviewed 2026-07-05 16:21:00 +00:00

greg left a comment

👍

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#635