MG-138: Add datamasking service adapted from codeready-toolchain/tarsy-bot

[swghosh]

Description

Adds a data masking layer for MCP server request/response.

This implementation is blatantly adapted from https://github.com/codeready-toolchain/tarsy-bot/blob/master/backend/tarsy/services/data_masking_service.py.

Type of change

• New feature
• Optimization

Details

Masking available Pattern Groups:

Group	Patterns Included
basic	api_key, password
secrets	api_key, password, token
security	api_key, password, token, certificate, certificate_authority_data, email, ssh_key
kubernetes	kubernetes_secret (code-based), api_key, password, certificate_authority_data
all	All available patterns

[openshift-ci-robot]

@swghosh: This pull request references MG-138 which is a valid jira issue.

Details

In response to this:

Description

Adds a data masking layer for MCP server request/response.

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change

Related Tickets & Documents

• Related Issue #
• Closes #

Checklist before requesting a review

• I have performed a self-review of my code.
• PR has passed all pre-merge test jobs.
• If it is a core feature, I have added thorough tests.

Testing

• Please provide detailed steps to perform tests related to this code change.
• How were the fix/results from this change verified? Please provide relevant screenshots or results.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@swghosh: This pull request references MG-138 which is a valid jira issue.

Details

In response to this:

Description

Adds a data masking layer for MCP server request/response.

Type of change

• New feature
• Optimization

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign onmete for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci-robot]

@swghosh: This pull request references MG-138 which is a valid jira issue.

Details

In response to this:

Description

Adds a data masking layer for MCP server request/response.

This implementation is blatantly adapted from https://github.com/codeready-toolchain/tarsy-bot/blob/master/backend/tarsy/services/data_masking_service.py.

Type of change

• New feature
• Optimization

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@swghosh: This pull request references MG-138 which is a valid jira issue.

Details

In response to this:

Description

Adds a data masking layer for MCP server request/response.

This implementation is blatantly adapted from https://github.com/codeready-toolchain/tarsy-bot/blob/master/backend/tarsy/services/data_masking_service.py.

Type of change

• New feature
• Optimization

Masking available Pattern Groups:

Group	Patterns Included
basic	api_key, password
secrets	api_key, password, token
security	api_key, password, token, certificate, certificate_authority_data, email, ssh_key
kubernetes	kubernetes_secret (code-based), api_key, password, certificate_authority_data
all	All available patterns

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

@swghosh: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/integration	49b2aa3	link	true	/test integration
ci/prow/unit	49b2aa3	link	true	/test unit
ci/prow/verify	49b2aa3	link	true	/test verify

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[onmete]

no activity

/close

[openshift-ci]

@onmete: Closed this PR.

Details

In response to this:

no activity

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.