[HADOOP-14260] Configuration.dumpConfiguration should redact sensitive information

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.9.0, 3.0.0-beta1, 2.8.3
• Component/s: conf, security
• Target Version/s: 3.0.0-beta1
• Hadoop Flags: Incompatible change

Release Note

<!-- markdown -->
Configuration.dumpConfiguration no longer prints out the clear text values for the sensitive keys listed in `hadoop.security.sensitive-config-keys`. Callers can override the default list of sensitive keys either to redact more keys or print the clear text values for a few extra keys for debugging purpose.

• Assignee: John Zhuge
• Reporter: Vihang Karajgaonkar
• Created: 30/Mar/17 21:21
• Updated: 11/Aug/17 18:35
• Resolved: 11/Aug/17 18:08

Description

Configuration.dumpConfiguration dumps all the configuration values without redacting the sensitive configurations stored in the Configuration object.

Issue Links

• depends upon: HADOOP-14241 Add ADLS sensitive config keys to default list
• depends upon: HADOOP-14243 Add S3A sensitive config keys to default list