[HADOOP-12804] Read Proxy Password from Credential Providers in S3 FileSystem

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8.0, 3.0.0-alpha1
• Fix Version/s: 2.8.0
• Component/s: fs/s3
• Target Version/s: 2.8.0
• Assignee: Larry McCay
• Reporter: Larry McCay
• Created: 13/Feb/16 14:43
• Updated: 25/Nov/16 13:39
• Resolved: 25/Nov/16 13:39

Description

HADOOP-12548 added credential provider support for the AWS credentials to S3FileSystem. This JIRA is for considering the use of the credential providers for the proxy password as well.

Instead of adding the proxy password to the config file directly and in clear text, we could provision it in addition to the AWS credentials into a credential provider and keep it out of clear text.

In terms of usage, it could be added to the same credential store as the AWS credentials or potentially to a more universally available path - since it is the same for everyone. This would however require multiple providers to be configured in the provider.path property and more open file permissions on the store itself.

Issue Links

• relates to: HADOOP-12548 Read s3a creds from a Credential Provider