[jira] [Created] (HDFS-17873) Use a password retrieval method (e.g. conf.getPassword) in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory, similar to HttpServer2

["Hiroki Egawa (Jira)" <ji...@apache.org>]

Hiroki Egawa created HDFS-17873:
-----------------------------------

             Summary: Use a password retrieval method (e.g. conf.getPassword) in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory, similar to HttpServer2
                 Key: HDFS-17873
                 URL: https://issues.apache.org/jira/browse/HDFS-17873
             Project: Hadoop HDFS
          Issue Type: Improvement
          Components: rbf, security
    Affects Versions: 3.4.2
            Reporter: Hiroki Egawa


Currently, HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory do not use conf.getPassword for retrieving passwords, unlike HttpServer2.

In HttpServer2, passwords are retrieved via conf.getPassword, which supports both plain-text configuration values and secure credential providers in a unified and secure manner.

This ticket proposes the following changes:
 * Introduce a password retrieval mechanism equivalent to conf.getPassword in HikariDataSourceConnectionFactory
 * Apply the same mechanism to MySQLStateStoreHikariDataSourceConnectionFactory

Expected Outcome
 * Secure credential providers can be used instead of plain-text passwords in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org