[
https://issues.apache.org/jira/browse/FLINK-38685?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Zhongqiang Gong reassigned FLINK-38685:
---------------------------------------
Assignee: Tejansh Rana
> Flink Postgres CDC connector logs the database password
> -------------------------------------------------------
>
> Key: FLINK-38685
> URL: https://issues.apache.org/jira/browse/FLINK-38685
> Project: Flink
> Issue Type: Bug
> Components: Flink CDC
> Reporter: Tejansh Rana
> Assignee: Tejansh Rana
> Priority: Blocker
> Labels: pull-request-available
>
> The Flink Postgres CDC connector, when initialising, logs the complete
> connector configuration, including the {{database.password}} property, in
> plain text to the TaskManager logs.
> *Steps to Reproduce:*
> # Start a Flink Cluster (or run a local Flink job).
> # Create a DataStream application using the
> flink-connector-postgres-cdc
> # Ensure the configuration contains {{{}database.password{}}}.
> # Start the job.
> # Examine the TaskManager logs
> *Observed Behavior:*
> The log contains a line similar to
>
> {{2025-11-14 11:04:29,954 INFO
> org.apache.flink.cdc.connectors.postgres.source.fetch.PostgresSourceFetchTaskContext
> [] - PostgresConnectorConfig is
> {connector.class=io.debezium.connector.postgresql.PostgresConnector,
> slot.name=flink_cdh_sample_1_3, schema.include.list=public,
> provide.transaction.metadata=true, include.schema.changes=false,
> database.sslmode=require, database.history.skip.unparseable.ddl=true,
> database.sslfactory=org.postgresql.ssl.NonValidatingFactory,
> database.history.instance.name=6d5b0651-f15b-49f3-a210-32a4654158de_3,
> database.tcpKeepAlive=true, database.dbname=foo_sample,
> database.user=foo_user, slot.drop.on.stop=true,
> database.history.refer.ddl=true, database.server.name=postgres_cdc_source,
> heartbeat.interval.ms=0, plugin.name=pgoutput, database.port=5432,
> database.hostname=postgres, {color:#FF0000}database.password=postgres{color},
> database.sslrootcert=, table.include.list=public.foo_sample_users,
> database.history=org.apache.flink.cdc.connectors.base.source.EmbeddedFlinkDatabaseHistory,
> snapshot.mode=never}}}
>
>
> See -
> [https://github.com/apache/flink-cdc/blob/7a6bfd85df5fed9b2c0e0dda8e8492a682c429f6/flink-cdc-connect/flink-cdc-source-connectors/flink-connector-postgres-cdc/src/main/java/org/apache/flink/cdc/connectors/postgres/source/fetch/PostgresSourceFetchTaskContext.java#L171]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
