Shift Service Logs - Personal Information
Scope: KOBIL Shift Service Pods are standard k8s Pods using the default Pod logfile capabilities for kubernetes. The Pod logs are containing important info for runtime, processing and status.
Sensitive Personal Information (SPI), e.g.:
- Credentials
- Token
- Other secrets
Personal Information (PI), e.g.:
-
UserID
-
Emailadress
-
(Future: phone number)
-
…
| Component | Log Level | PI/SPI |
|---|---|---|
| IDP | INFO | PI is partially censored, logic: ab***xyz (adapts to length) sPI is not shown |
| DEBUG | PI is shown sPI is not shown | |
| AST Services | INFO | No PI included sPI is censored, logic: ****** * AST Service Property content * Passwords * Device Binding Parameters * … |
| DEBUG | Same as INFO |
Notes:
- UUID is a pseudonym of the user which is currently required for support purpose and is therefore not treated as PI
- Device information is not treated as PI.