Add stable pseudonymous telemetry identifiers#140
Merged
Conversation
Coverage Report
File Coverage
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Contributor
Author
|
#141 |
de1987
force-pushed
the
telemetry-pseudo-ids
branch
2 times, most recently
from
01dff15 to
63d80b1
Compare
Contributor
|
Rebase |
de1987
force-pushed
the
telemetry-pseudo-ids
branch
from
63d80b1 to
8e679d4
Compare
TamiTakamiya
approved these changes
Mar 27, 2026
Contributor
TamiTakamiya
left a comment
TamiTakamiya
left a comment
There was a problem hiding this comment.
While I left two comments, they are minor and I think it is good overall. Thanks!
de1987
force-pushed
the
telemetry-pseudo-ids
branch
2 times, most recently
from
ddcc626 to
5c19fed
Compare
de1987
force-pushed
the
telemetry-pseudo-ids
branch
from
5c19fed to
2b13a43
Compare
TamiTakamiya
approved these changes
Mar 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Replaces the volatile
user_unique_id(which changed on every server restart) with three new stable, privacy-preserving telemetry fields:user_pseudo_id: HMAC-SHA-256 of the user'sansible_idfrom the/api/gateway/v1/me/endpoint. Stable across restarts. Falls back to literal"anonymous"whenansible_idis unavailable.installer_pseudo_id: HMAC-SHA-256 of theINSTALLER_IDenv var (injected by the Operator or Containerized installer). Defaults to"unknown"when not set.user_type:"internal"or"external"based on email domain matching againstINTERNAL_EMAIL_DOMAINS(defaults toredhat.com,ibm.com,ansible.com).All pseudonymous identifiers use HMAC-SHA-256 with a persistent secret key (
TELEMETRY_HMAC_KEY), making brute-force reversal infeasible. No PII is transmitted in any telemetry event.