[FLINK-30443] Expand list of sensitive keys

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.17.0
• Component/s: API / Core
• Labels: pull-request-available
• Assignee: Gunnar Morling
• Reporter: Gunnar Morling
• Created: 16/Dec/22 16:11
• Updated: 22/Dec/22 20:47
• Resolved: 22/Dec/22 20:47

Description

In GlobalConfiguration, there is a list of known configuration keys whose values will be masked in log output. In our Flink deployment there's a few more keys which we would like to mask, specifically, the following ones:

• "auth-params"
• "service-key"
• "token"
• "basic-auth"
• "jaas.config"

While those are somewhat use-case specific, I feel they are generic enough for being added to that list, and there already is precedence in form of "fs.azure.account.key". In that light, I don't think it's worth making this somehow pluggable, but I'm curious what other folks here think. Thanks!
 

Issue Links

• links to: GitHub Pull Request #21552