basapuram-kumar opened a new pull request, #26677:
URL: https://github.com/apache/flink/pull/26677

   
   ## What is the purpose of the change
   
   This PR implements OBF password obfuscation support for Flink's SSL 
configurations to eliminate plaintext password exposure in configuration files
   
   ## Brief change log
   **New Features:**
   Added support for Jetty OBF password obfuscation format (OBF:...) for all 
SSL-related passwords:
   
   1. keystore-password
   2. key-password
   3. truststore-password
   
   **Changes**
   - Modified SSLUtils to automatically detect and decrypt OBF passwords
   - Updated configuration validation to handle both plaintext and OBF formats
   
   **Backwards Compatibility:**
   - Maintained full support for existing plaintext passwords
   - No configuration format changes required
   - History server Web server UI launches as usual in this OBF mode too.
   
   
   
   ## Verifying this change
   
   With OBF password obfuscation way, the functionality of the Flink's  works 
seamlessly and the history server webUI also launches in SSL mode same    as  
the Plain-text mode.
   
   *(Please pick either of the following options)*
   
   This change is a trivial rework / code cleanup without any test coverage.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to