Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-20055

Datadog API Key exposed in Flink JobManager logs

    XMLWordPrintableJSON

    Details

      Description

      When Flink is set up to report metrics to Datadog, the JobManager log containe the Datadog API key in plain format. In fact it shows up in two different places:

      2020-08-03 09:03:19,400 INFO  org.apache.flink.configuration.GlobalConfiguration            - Loading configuration property: metrics.reporter.dghttp.apikey, <REDACTED-KEY>
      ...
      2020-08-03 09:03:20,437 INFO  org.apache.flink.runtime.metrics.ReporterSetup                - Configuring dghttp with {apikey=<REDACTED-KEY>, tags=<...>,profile:<...>,region:<...>,env:<...>, class=org.apache.flink.metrics.datadog.DatadogHttpReporter}.
      

      The expected behavior here should be that the API key in both places is hidden so that it does not end up in places where it should not be.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                flrnks Florian Szabo
                Reporter:
                flrnks Florian Szabo
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: