New RunLLM response generated:
>>>*# Question*
I enabled debug logging on my Flyte installation a while ago and just now realized that its logging auth tokens. This is a security issue for us and I feel like there should probably be some additional configuration flags in place to enable this kind of logging.
# Answer
Flyte does log inputs and outputs, which can include sensitive data like auth tokens. This behavior is primarily for debugging purposes. According to
GitHub issue #1340, there is a need for an option to disable logging of sensitive information. However, it appears that this issue has been acknowledged and there might be ongoing efforts to address it.
Would you like more details on how to potentially mitigate this issue or configure logging settings?
Sources:
-
GitHub issue #1340
Slack Link
https://flyte-org.slack.com/archives/CP2HDHKE1/p1718919057.757279 👍 0 button 👎 0 button 💡
Hint: Mention @runllm in the thread for followups.