{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/19991","labels_url":"https://api.github.com/repos/saltstack/salt/issues/19991/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/19991/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/19991/events","html_url":"https://github.com/saltstack/salt/issues/19991","id":55268657,"number":19991,"title":"Move topfile rendering to master","user":{"login":"syphernl","id":639906,"avatar_url":"https://avatars.githubusercontent.com/u/639906?v=3","gravatar_id":"","url":"https://api.github.com/users/syphernl","html_url":"https://github.com/syphernl","followers_url":"https://api.github.com/users/syphernl/followers","following_url":"https://api.github.com/users/syphernl/following{/other_user}","gists_url":"https://api.github.com/users/syphernl/gists{/gist_id}","starred_url":"https://api.github.com/users/syphernl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/syphernl/subscriptions","organizations_url":"https://api.github.com/users/syphernl/orgs","repos_url":"https://api.github.com/users/syphernl/repos","events_url":"https://api.github.com/users/syphernl/events{/privacy}","received_events_url":"https://api.github.com/users/syphernl/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/saltstack/salt/labels/Feature","name":"Feature","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/saltstack/salt/milestones/13","labels_url":"https://api.github.com/repos/saltstack/salt/milestones/13/labels","id":9265,"number":13,"title":"Approved","description":"All issues that are ready to be worked on, both bugs and features.","creator":{"login":"thatch45","id":507599,"avatar_url":"https://avatars.githubusercontent.com/u/507599?v=3","gravatar_id":"","url":"https://api.github.com/users/thatch45","html_url":"https://github.com/thatch45","followers_url":"https://api.github.com/users/thatch45/followers","following_url":"https://api.github.com/users/thatch45/following{/other_user}","gists_url":"https://api.github.com/users/thatch45/gists{/gist_id}","starred_url":"https://api.github.com/users/thatch45/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thatch45/subscriptions","organizations_url":"https://api.github.com/users/thatch45/orgs","repos_url":"https://api.github.com/users/thatch45/repos","events_url":"https://api.github.com/users/thatch45/events{/privacy}","received_events_url":"https://api.github.com/users/thatch45/received_events","type":"User","site_admin":false},"open_issues":1851,"closed_issues":1452,"state":"open","created_at":"2011-05-14T04:00:56Z","updated_at":"2015-01-23T23:55:36Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-01-23T10:51:18Z","updated_at":"2015-01-24T01:25:49Z","closed_at":null,"body":"When running Salt-minion in debug you'll see that the whole topfile gets pushed to the Minion which evaluates which apply to it. \r\nThis may lead to excessive data leakage since it will show hostnames/minion id's of those other than itself.\r\n\r\nThis is not desirable in environments where customers or thirdparties have access to the server and its logs, since they'll be able to see which servers and states are available.\r\n\r\nIt would make more sense if the master deals with this and simply pushes only the matched data to the minion.  This would be the same behavior as pillar data right?"},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/71293596","html_url":"https://github.com/saltstack/salt/issues/19991#issuecomment-71293596","issue_url":"https://api.github.com/repos/saltstack/salt/issues/19991","id":71293596,"user":{"login":"damon-atkins","id":9368124,"avatar_url":"https://avatars.githubusercontent.com/u/9368124?v=3","gravatar_id":"","url":"https://api.github.com/users/damon-atkins","html_url":"https://github.com/damon-atkins","followers_url":"https://api.github.com/users/damon-atkins/followers","following_url":"https://api.github.com/users/damon-atkins/following{/other_user}","gists_url":"https://api.github.com/users/damon-atkins/gists{/gist_id}","starred_url":"https://api.github.com/users/damon-atkins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/damon-atkins/subscriptions","organizations_url":"https://api.github.com/users/damon-atkins/orgs","repos_url":"https://api.github.com/users/damon-atkins/repos","events_url":"https://api.github.com/users/damon-atkins/events{/privacy}","received_events_url":"https://api.github.com/users/damon-atkins/received_events","type":"User","site_admin":false},"created_at":"2015-01-24T01:25:49Z","updated_at":"2015-01-24T01:25:49Z","body":"What needs to be prevented, is someone breaking into the system and changing the servers role (i.e. the set of software, sudo rules, passwords for apps,etc), from this breaking into more systems or gaining more access. Providing only the bits of the top file required, to the client is part of doing this."}}