You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "Matthias Pohl (Jira)" <ji...@apache.org> on 2024/02/29 07:01:00 UTC
[jira] [Resolved] (FLINK-34499) Configuration#toString should hide sensitive values
[ https://issues.apache.org/jira/browse/FLINK-34499?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Matthias Pohl resolved FLINK-34499.
-----------------------------------
Fix Version/s: 1.19.0
1.17.3
1.18.2
(was: 1.20.0)
Resolution: Fixed
master: [9e81177e44d63501b360b1a246a16ea3faecb548|https://github.com/apache/flink/commit/9e81177e44d63501b360b1a246a16ea3faecb548]
1.19: [5016325b6ec930a3f5cd3b186c185e004ede8691|https://github.com/apache/flink/commit/5016325b6ec930a3f5cd3b186c185e004ede8691]
1.18: [e770cef5d1df282fe28deb5f1309873b8342d046|https://github.com/apache/flink/commit/e770cef5d1df282fe28deb5f1309873b8342d046]
1.17: [72fbc89777286d9cda46a80231b2db11c21ced0d|https://github.com/apache/flink/commit/72fbc89777286d9cda46a80231b2db11c21ced0d]
> Configuration#toString should hide sensitive values
> ---------------------------------------------------
>
> Key: FLINK-34499
> URL: https://issues.apache.org/jira/browse/FLINK-34499
> Project: Flink
> Issue Type: Improvement
> Components: Runtime / Configuration
> Affects Versions: 1.17.2, 1.19.0, 1.18.1, 1.20.0
> Reporter: Chesnay Schepler
> Assignee: Chesnay Schepler
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.19.0, 1.17.3, 1.18.2
>
>
> Time and time again people log the entire Flink configuration for no reason, risking that sensitive values are logged in plain text.
> We should make this harder by changing {{Configuration#toString}} to automatically hide sensitive values, for example like this:
> {code}
> @Override
> public String toString() {
> return ConfigurationUtils
> .hideSensitiveValues(this.confData.entrySet().stream().collect(
> Collectors.toMap(Map.Entry::getKey, entry -> entry.getValue().toString())))
> .toString();
> }
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)