[jira] [Commented] (FLINK-21196) Sensitive information(password) is in plain text format in flink-conf.yaml configuration file

["Chesnay Schepler (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-21196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281462#comment-17281462 ] 

Chesnay Schepler commented on FLINK-21196:
------------------------------------------

Security-wise we usually only focus on external connectivity (e.g., the REST API / WebUI, clients, networking between nodes).

If an attacker has read access to such files then you have probably already lost.

> Sensitive information(password) is in plain text format in flink-conf.yaml configuration file
> ---------------------------------------------------------------------------------------------
>
>                 Key: FLINK-21196
>                 URL: https://issues.apache.org/jira/browse/FLINK-21196
>             Project: Flink
>          Issue Type: Bug
>          Components: Deployment / Scripts
>    Affects Versions: 1.10.0, 1.11.3
>            Reporter: Suchithra V N
>            Priority: Major
>
> When ssecurit settings are enabled in flink configuration passwords information will be wriiten in flink-conf.yaml file as a plain text. If any attacker is able to access this file can use these paswords to decrypt the files. Hence secure mechanism is required to mask these senstive information from flink-conf.yaml file.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)