From b9ace2788c2f9c327ac519fa007bc08470f4fd2b Mon Sep 17 00:00:00 2001

From: Jake Hunsaker <jhunsake@redhat.com>

Date: Thu, 25 Jan 2018 17:43:12 -0500

Subject: [PATCH] [etcd] Do not collect private etcd keys

Prevents sos from capturing the /etc/etcd/ca directory and its contents,

which is primarily private keys and the like.

Signed-off-by: Jake Hunsaker <jhunsake@redhat.com>

---

 sos/plugins/etcd.py | 1 +

 1 file changed, 1 insertion(+)

diff --git a/sos/plugins/etcd.py b/sos/plugins/etcd.py

index d80bbeeb..884aa1bd 100644

--- a/sos/plugins/etcd.py

+++ b/sos/plugins/etcd.py

@@ -31,6 +31,7 @@ class etcd(Plugin, RedHatPlugin):

     def setup(self):

         etcd_url = self.get_etcd_url()

+        self.add_forbidden_path('/etc/etcd/ca')

         self.add_copy_spec('/etc/etcd')

         subcmds = [

-- 

2.13.6