[ISSUE #10710] Sanitize lite offline Settings failure logs - #10712
Conversation
RockteMQ-AI
left a comment
There was a problem hiding this comment.
Review by github-manager-bot
Summary
Replace full protobuf Settings logging in lite offline cleanup failures with a compact diagnostic summary to prevent sensitive subscription filter details from leaking into logs.
Findings
- [Info] GrpcClientSettingsManager.java:257-282 —
summarizeLiteSettings()correctly extracts only safe diagnostic fields (clientType, group, first topic, subscription count) without exposing subscription filter expressions. - [Info] GrpcClientSettingsManager.java:260 — Null check for settings is good defensive coding.
- [Info] GrpcClientSettingsManagerTest.java — Regression test verifies that filter details are not leaked in the summary output. Good coverage.
- [Info] — Fixes #10710, clean and focused change.
Suggestions
- Minor:
summarizeLiteSettingsonly shows the first topic (subscriptions(0)). If multiple topics are involved in a failure, only the first is visible. This is acceptable for error-path logging, but consider loggingsubscriptionCountprominently so operators know there may be more topics involved. - Consider making the method package-private instead of
protected staticif no subclass override is intended — this limits the API surface.
Overall
Clean fix for a log sanitization issue. Good test coverage. LGTM.
Automated review by github-manager-bot
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## develop #10712 +/- ##
=============================================
- Coverage 48.31% 48.24% -0.08%
+ Complexity 13511 13482 -29
=============================================
Files 1380 1380
Lines 101091 101104 +13
Branches 13101 13103 +2
=============================================
- Hits 48844 48773 -71
- Misses 46285 46344 +59
- Partials 5962 5987 +25 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
RockteMQ-AI
left a comment
There was a problem hiding this comment.
Summary
Defensive fix with proper validation and test coverage. LGTM.
Automated review by github-manager-bot
|
Consolidated into #10719; both changes cover GrpcClientSettingsManager settings diagnostics. |
Summary
Fixes #10710
Tests