[GitHub] [hive] rbalamohan commented on a diff in pull request #3019: HIVE-25929: Let secret config properties to be propagated to Tez

[GitBox <gi...@apache.org>]

rbalamohan commented on code in PR #3019:
URL: https://github.com/apache/hive/pull/3019#discussion_r874242811


##########
common/src/java/org/apache/hadoop/hive/conf/HiveConf.java:
##########
@@ -5455,6 +5455,22 @@ public static enum ConfVars {
         + ",hive.zookeeper.ssl.truststore.location"
         + ",hive.zookeeper.ssl.truststore.password",
         "Comma separated list of configuration options which should not be read by normal user like passwords"),
+    HIVE_CONF_PROPAGATE_EXEC_ENGINES("hive.conf.propagate.exec.engines",
+        "fs.s3.awsAccessKeyId"

Review Comment:
   If configs are dumped in logs or available as files in the local directories of AM or tasks, this would be visible to end users which can be a serious risk.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org
For additional commands, e-mail: gitbox-help@hive.apache.org