You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
send one privacy-minimized aggregate Scarf event per day from the elected operator leader
route public operator, default engine, and Helm chart pulls through Firebolt-owned Scarf gateways
make telemetry.enabled=false disable runtime events and switch default operator/engine image pulls to GHCR
preserve every user-supplied operator, FireboltEngine, and FireboltEngineClass image repository
Privacy
The event includes operator/engine versions, Kubernetes minor, OS/architecture, and bucketed instance/engine/replica counts. It contains no names, stable identifiers, query data, schemas, secrets, or configuration. The source IP is visible to Scarf for company inference but is not stored.
The README pixel is disclosed separately because it operates independently of runtime settings.
Opt-out behavior
telemetry.enabled=false provides one control for runtime telemetry and default image routing. To bypass Scarf for the chart download itself, install from oci://ghcr.io/firebolt-db/helm-charts; Helm selects the chart URL before reading values. DO_NOT_TRACK and SCARF_NO_ANALYTICS disable runtime events only.
Managed deployment dependency
Firebolt-managed deployments must land their DO_NOT_TRACK=1 follow-up PRs before this chart is released. Managed compute charts already override operator and engine repositories to the internal ECR mirror.
Test plan
make test
make lint
make docs-check
make helm-docs
helm lint helm/firebolt-operator
verify default render uses Scarf repositories
verify telemetry.enabled=false renders GHCR repositories and --telemetry=false
verify a custom operator repository remains unchanged when telemetry is disabled
Note
Medium Risk
Changes default image/chart pull paths and adds outbound telemetry; misconfiguration could surprise air-gapped installs, though opt-out and GHCR bypass are documented and user image repos are preserved.
Overview
Introduces anonymous Scarf usage telemetry: the elected operator leader runs a new internal/telemetry reporter that sends at most one aggregate event per day (bucketed instance/engine/replica counts, versions, K8s minor, OS/arch) via --telemetry / --telemetry-endpoint, with DO_NOT_TRACK / SCARF_NO_ANALYTICS respected through scarf-go.
Default distribution shifts to Firebolt’s Scarf gateways: Helm chart and docs use oci://oci.firebolt.io/..., default operator and embedded engine images use oci.firebolt.io, and README adds Scarf badges plus a disclosed README pixel. telemetry.enabled=false (or --telemetry=false) disables runtime events, passes that flag from the chart, and when the chart’s default operator repo is unchanged, rewrites the operator image to GHCR; the binary calls UseDirectEngineRepository() so the operator’s fallback engine repo becomes GHCR while CR/engine/class image overrides stay intact.
Local dev and CI are updated (make local-deploy disables telemetry, Kind mirrors oci.firebolt.io). Privacy and opt-out behavior are documented in README, installation, and quickstart.
Reviewed by Cursor Bugbot for commit d0fc3b8. Bugbot is set up for automated code reviews on this repo. Configure here.
Report one privacy-minimized aggregate event per day from the elected operator leader, with transparent Helm controls and documentation so public adoption is measurable and users can opt out.
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: medium. Not approving: Cursor Bugbot found 2 unresolved issues (including a medium-severity daily-report guarantee concern) and its check skipped; Security Agent passed. Assigned fstr and leonard-firebolt for follow-up.
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: high. Not approving: Cursor Bugbot skipped with 3 unresolved findings (including high-severity Kind mirror breakage) and Security Agent reported a medium-severity README tracking-pixel issue. fstr and leonard-firebolt are already assigned for follow-up.
Delay the first event by a full interval to preserve the daily guarantee, reuse the standard image parser, mirror the Scarf registry in Kind, and disclose README pixel behavior.
The reason will be displayed to describe this comment to others. Learn more.
Stale comment
Risk: medium. Approved: Cursor Bugbot and Security Agent passed on the latest commit with no new findings, and prior automated review threads are resolved. fstr and leonard-firebolt remain assigned for human review.
The reason will be displayed to describe this comment to others. Learn more.
Risk: medium. Approved: Cursor Bugbot and Security Agent passed on the latest commit with no new findings, and all prior automated review threads are resolved. fstr and leonard-firebolt remain assigned for human review.
Squash-merge the packdb PR into master to publish the docs. Urgent fixes can be cherry-picked to the active release/packdb-* branch like any other docs change.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Summary
telemetry.enabled=falsedisable runtime events and switch default operator/engine image pulls to GHCRFireboltEngine, andFireboltEngineClassimage repositoryPrivacy
The event includes operator/engine versions, Kubernetes minor, OS/architecture, and bucketed instance/engine/replica counts. It contains no names, stable identifiers, query data, schemas, secrets, or configuration. The source IP is visible to Scarf for company inference but is not stored.
The README pixel is disclosed separately because it operates independently of runtime settings.
Opt-out behavior
telemetry.enabled=falseprovides one control for runtime telemetry and default image routing. To bypass Scarf for the chart download itself, install fromoci://ghcr.io/firebolt-db/helm-charts; Helm selects the chart URL before reading values.DO_NOT_TRACKandSCARF_NO_ANALYTICSdisable runtime events only.Managed deployment dependency
Firebolt-managed deployments must land their
DO_NOT_TRACK=1follow-up PRs before this chart is released. Managed compute charts already override operator and engine repositories to the internal ECR mirror.Test plan
make testmake lintmake docs-checkmake helm-docshelm lint helm/firebolt-operatortelemetry.enabled=falserenders GHCR repositories and--telemetry=falseNote
Medium Risk
Changes default image/chart pull paths and adds outbound telemetry; misconfiguration could surprise air-gapped installs, though opt-out and GHCR bypass are documented and user image repos are preserved.
Overview
Introduces anonymous Scarf usage telemetry: the elected operator leader runs a new
internal/telemetryreporter that sends at most one aggregate event per day (bucketed instance/engine/replica counts, versions, K8s minor, OS/arch) via--telemetry/--telemetry-endpoint, withDO_NOT_TRACK/SCARF_NO_ANALYTICSrespected through scarf-go.Default distribution shifts to Firebolt’s Scarf gateways: Helm chart and docs use
oci://oci.firebolt.io/..., default operator and embedded engine images useoci.firebolt.io, and README adds Scarf badges plus a disclosed README pixel.telemetry.enabled=false(or--telemetry=false) disables runtime events, passes that flag from the chart, and when the chart’s default operator repo is unchanged, rewrites the operator image to GHCR; the binary callsUseDirectEngineRepository()so the operator’s fallback engine repo becomes GHCR while CR/engine/class image overrides stay intact.Local dev and CI are updated (
make local-deploydisables telemetry, Kind mirrorsoci.firebolt.io). Privacy and opt-out behavior are documented in README, installation, and quickstart.Reviewed by Cursor Bugbot for commit d0fc3b8. Bugbot is set up for automated code reviews on this repo. Configure here.