I'd like to come up with a simple rule about PII in the API, such as:

• The following things are considered PII
  • User object names
  • User labels and annotations
  • Image names
  • Commands, args, env
  • ConfigMap entries
  • Secret entries
• PII shouldn't be recorded in non-namespaced resources (e.g., nodes) other than namespaces themselves

This has come up twice recently.

cc @erictune @smarterclayton @liggitt @deads2k @davidopp