[FLINK-34499] Configuration#toString should hide sensitive values - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: 1.17.2, 1.19.0, 1.18.1, 1.20.0
Fix Version/s: 1.19.0, 1.17.3, 1.18.2
Component/s: Runtime / Configuration
Labels:
- pull-request-available

Description

Time and time again people log the entire Flink configuration for no reason, risking that sensitive values are logged in plain text.

We should make this harder by changing Configuration#toString to automatically hide sensitive values, for example like this:

    @Override
    public String toString() {
        return ConfigurationUtils
                .hideSensitiveValues(this.confData.entrySet().stream().collect(
                        Collectors.toMap(Map.Entry::getKey, entry -> entry.getValue().toString())))
                .toString();
    }