[KAFKA-15377] GET /connectors/{connector}/tasks-config endpoint exposes externalized secret values

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.6.0, 3.4.2, 3.5.2
• Component/s: connect
• Assignee: Yash Mayya
• Reporter: Yash Mayya
• Created: 18/Aug/23 07:07
• Updated: 25/Aug/23 02:57
• Resolved: 24/Aug/23 23:34

Description

The GET /connectors/{connector}/tasks-config endpoint added in https://cwiki.apache.org/confluence/display/KAFKA/KIP-661%3A+Expose+task+configurations+in+Connect+REST+API exposes externalized secret values in task configurations (see https://cwiki.apache.org/confluence/display/KAFKA/KIP-297%3A+Externalizing+Secrets+for+Connect+Configurations). A similar bug was fixed in https://issues.apache.org/jira/browse/KAFKA-5117 / https://github.com/apache/kafka/pull/6129 for the GET /connectors/{connector}/tasks endpoint. The config provider placeholder should be used instead of the resolved config value.

Issue Links

• links to: GitHub Pull Request #14244
• mentioned in: Page Loading...