[jira] [Resolved] (KAFKA-14822) Allow restricting File and Directory ConfigProviders to specific paths

["Mickael Maison (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-14822?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mickael Maison resolved KAFKA-14822.
------------------------------------
    Fix Version/s: 3.8.0
         Assignee: Gantigmaa Selenge  (was: Mickael Maison)
       Resolution: Fixed

> Allow restricting File and Directory ConfigProviders to specific paths
> ----------------------------------------------------------------------
>
>                 Key: KAFKA-14822
>                 URL: https://issues.apache.org/jira/browse/KAFKA-14822
>             Project: Kafka
>          Issue Type: Improvement
>            Reporter: Mickael Maison
>            Assignee: Gantigmaa Selenge
>            Priority: Major
>              Labels: need-kip
>             Fix For: 3.8.0
>
>
> In sensitive environments, it would be interesting to be able to restrict the files that can be accessed by the built-in configuration providers.
> For example:
> config.providers=directory
> config.providers.directory.class=org.apache.kafka.connect.configs.DirectoryConfigProvider
> config.providers.directory.path=/var/run
> Then if a caller tries to access another path, for example
> ssl.keystore.password=${directory:/etc/passwd:keystore-password}
> it would be rejected.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)