[jira] [Commented] (FLINK-13957) Redact passwords from dynamic properties on job submission

["Márton Balassi (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-13957?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16922423#comment-16922423 ] 

Márton Balassi commented on FLINK-13957:
----------------------------------------

Thanks for reporting the issue, [~morhidi]. I am aware that you already have a proposed solution, could you please elaborate?

> Redact passwords from dynamic properties on job submission
> ----------------------------------------------------------
>
>                 Key: FLINK-13957
>                 URL: https://issues.apache.org/jira/browse/FLINK-13957
>             Project: Flink
>          Issue Type: Improvement
>          Components: Client / Job Submission
>    Affects Versions: 1.9.0
>            Reporter: Matyas Orhidi
>            Assignee: Matyas Orhidi
>            Priority: Major
>              Labels: log, security, sensitivity
>             Fix For: 1.9.1
>
>
> SSL related passwords specified by dynamic properties are showing up in {{FlinkYarnSessionCli}} logs in plain text:
> {{19/09/04 04:57:43 INFO cli.FlinkYarnSessionCli: Dynamic Property set: security.ssl.internal.truststore-password=changeit}}
> {{19/09/04 04:57:43 INFO cli.FlinkYarnSessionCli: Dynamic Property set: security.ssl.internal.keystore-password=changeit}}
> {{19/09/04 04:57:43 INFO cli.FlinkYarnSessionCli: Dynamic Property set: security.ssl.internal.key-password=changeit}}



--
This message was sent by Atlassian Jira
(v8.3.2#803003)