[jira] [Updated] (FLINK-20055) Datadog API Key exposed in Flink JobManager logs

["Chesnay Schepler (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-20055?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chesnay Schepler updated FLINK-20055:
-------------------------------------
    Affects Version/s:     (was: 1.11.2)
                           (was: 1.9.1)
                       1.9.0

> Datadog API Key exposed in Flink JobManager logs
> ------------------------------------------------
>
>                 Key: FLINK-20055
>                 URL: https://issues.apache.org/jira/browse/FLINK-20055
>             Project: Flink
>          Issue Type: Improvement
>          Components: Runtime / Configuration, Runtime / Metrics
>    Affects Versions: 1.9.0
>            Reporter: Florian Szabo
>            Assignee: Florian Szabo
>            Priority: Major
>              Labels: pull-request-available
>
> When Flink is set up to report metrics to Datadog, the JobManager log containe the Datadog API key in plain format. In fact it shows up in two different places:
> {code:java}
> 2020-08-03 09:03:19,400 INFO  org.apache.flink.configuration.GlobalConfiguration            - Loading configuration property: metrics.reporter.dghttp.apikey, <REDACTED-KEY>
> ...
> 2020-08-03 09:03:20,437 INFO  org.apache.flink.runtime.metrics.ReporterSetup                - Configuring dghttp with {apikey=<REDACTED-KEY>, tags=<...>,profile:<...>,region:<...>,env:<...>, class=org.apache.flink.metrics.datadog.DatadogHttpReporter}.
> {code}
> The expected behavior here should be that the API key in both places is hidden so that it does not end up in places where it should not be.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)