Skip to content

Add anonymous telemetry with opt-out#4

Merged
pizzabits merged 1 commit intomainfrom
telemetry
Mar 15, 2026
Merged

Add anonymous telemetry with opt-out#4
pizzabits merged 1 commit intomainfrom
telemetry

Conversation

@pizzabits
Copy link
Copy Markdown
Owner

Summary

  • Single anonymous ping per 24h on probe startup
  • Reports: version, kernel, arch, python, deployment type, uptime hours
  • Install ID: SHA-256 hash of kube-system namespace UID (never sent raw)
  • No PII, no IPs, no secret paths, no cluster info
  • Opt out: SECRETS_SNITCHER_NO_TELEMETRY=1

Changes

  • agent/api.py - telemetry functions (non-blocking daemon thread)
  • k8s/pod-inline.yaml - ConfigMap synced with telemetry code
  • k8s/rbac.yaml - ClusterRole for kube-system namespace read (install ID only)
  • README.md - telemetry disclosure section

Test plan

  • Verified on GCP K3s cluster - events received
  • SSL cert verification on all HTTPS calls
  • Uptime tracking via persistent boot time file
  • Opt-out env var tested

Single ping per 24h on probe start. Reports version, kernel, arch,
python, deployment type, and uptime. Install ID is SHA-256 of
kube-system namespace UID. No PII. Opt out: SECRETS_SNITCHER_NO_TELEMETRY=1.
RBAC added for kube-system namespace read (telemetry install ID only).
@pizzabits pizzabits merged commit 8da05f2 into main Mar 15, 2026
3 checks passed
@pizzabits pizzabits deleted the telemetry branch March 15, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant