[FLINK-19523] Hide sensitive command-line configurations

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.10.3, 1.11.3, 1.12.0
• Component/s: Runtime / Configuration
• Labels: pull-request-available
• Assignee: Qinghui Xu
• Reporter: Qinghui Xu
• Created: 07/Oct/20 20:29
• Updated: 07/Feb/23 14:11
• Resolved: 14/Oct/20 06:39

Description

When jobmanager starts up, it logs configurations from jvm options and application arguments. This includes secrets (eg. "s3.secret-key").
Ideally, secrets should be masked as it is when loading from configuration file.

Issue Links

• is fixed by: FLINK-30943 Hide sensitive command-line configurations
• links to: GitHub Pull Request #13609