[Metricbeat] googlecloud module has potential sensitive data in labels.metadata

[kaiyan-sheng]

When testing googlecloud module, I see in each event there are large amount of metadata included. For example, CA_CERT, KUBELET_CERT, KUBELET_KEY under googlecloud.labels.metadata.kube-env. Should we reconsider the metadata under googlecloud.labels.metadata.*?

If you use config below, you should be able to get the metrics that contain these information:

- module: googlecloud
  metricsets:
    - compute
  zone: "europe-west1-c"
  project_id: elastic-observability
  credentials_file_path: "<path-to-your-creds-file>"
  exclude_labels: false
  period: 300s

[kaiyan-sheng]

@jsoriano made a suggestion to whitelist the default metadata keys that we consider more useful.

[exekias]

I'm labeling this as a blocker. I think we should remove labels.metadata for now and think about adding it with proper whitelisting in a future release.