You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@beam.apache.org by "Ahmet Altay (JIRA)" <ji...@apache.org> on 2019/03/11 17:46:00 UTC
[jira] [Updated] (BEAM-6292) PasswordDecrypter: Delay decryption /
Avoid serialization
[ https://issues.apache.org/jira/browse/BEAM-6292?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ahmet Altay updated BEAM-6292:
------------------------------
Fix Version/s: (was: 2.11.0)
2.12.0
> PasswordDecrypter: Delay decryption / Avoid serialization
> ---------------------------------------------------------
>
> Key: BEAM-6292
> URL: https://issues.apache.org/jira/browse/BEAM-6292
> Project: Beam
> Issue Type: Improvement
> Components: io-java-cassandra
> Reporter: Mathieu Blanchard
> Assignee: Mathieu Blanchard
> Priority: Minor
> Labels: triaged
> Fix For: 2.12.0
>
> Time Spent: 10h 40m
> Remaining Estimate: 0h
>
> Currently, the password is decrypted before the serialization of the pipeline and this causes the raw version to be visible to everyone on the staging location.
> To avoid this, we delayed the decryption of the password when connecting to the cluster, which ensures that the raw password is never serialized in the pipeline.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)