Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-28569

Recommended additions to SECRET_REDACTION_PATTERN

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.0.0
    • Fix Version/s: None
    • Component/s: Spark Core
    • Labels:
      None

      Description

      There are a few things filtered by Hadoop's ConfigRedactor that are not currently filtered by SECRET_REDACTION_PATTERN that probably should be:

      ssl.keystore.pass$ (keystore password)
      fs.s3.*[Ss]ecret.?[Kk]ey (S3 secret access keys)
      fs.s3a.*.server-side-encryption.key (S3 server-side encryption keys)
      fs.azure\\.account.key.* (WASB / ABFS account secret keys)
      credential$ (OAuth2 secrets)
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              mackrorysd Sean Mackrory
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: