You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Akira Ajisaka (Jira)" <ji...@apache.org> on 2026/01/30 04:17:00 UTC

[jira] [Resolved] (HDFS-17873) Use a password retrieval method (e.g. conf.getPassword) in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory, similar to HttpServer2

     [ https://issues.apache.org/jira/browse/HDFS-17873?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Akira Ajisaka resolved HDFS-17873.
----------------------------------
    Fix Version/s: 3.5.0
       Resolution: Fixed

Merged the PR into trunk. Thank you!

> Use a password retrieval method (e.g. conf.getPassword) in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory, similar to HttpServer2
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HDFS-17873
>                 URL: https://issues.apache.org/jira/browse/HDFS-17873
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: rbf, security
>    Affects Versions: 3.4.2
>            Reporter: Hiroki Egawa
>            Assignee: Hiroki Egawa
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.5.0
>
>
> Currently, HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory do not use conf.getPassword for retrieving passwords, unlike HttpServer2.
> In HttpServer2, passwords are retrieved via conf.getPassword, which supports both plain-text configuration values and secure credential providers in a unified and secure manner.
> This ticket proposes the following changes:
>  * Introduce a password retrieval mechanism equivalent to conf.getPassword in HikariDataSourceConnectionFactory
>  * Apply the same mechanism to MySQLStateStoreHikariDataSourceConnectionFactory
> Expected Outcome
>  * Secure credential providers can be used instead of plain-text passwords in HikariDataSourceConnectionFactory and MySQLStateStoreHikariDataSourceConnectionFactory



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org