Re: Question about plain password in flink-conf.yaml

2022-01-18 Thread 狗嗖
Thanks for your reply.  We can try this on the CLI, but what about the Web UI? Thanks, Jerry ---Original--- From: "Gabor Somogyi"

Re: Question about plain password in flink-conf.yaml

2022-01-18 Thread Gabor Somogyi
export SSL_PASSWORD=secret flink run -yDsecurity.ssl.rest.*-password=$SSL_PASSWORD ... app.jar Such way the code which starts the workload can store the passwords in a centrally protected area. This still can be hacked but at least not stored in plain text file. BR, G On Tue, Jan 18, 2022 at 10

Question about plain password in flink-conf.yaml

2022-01-18 Thread 狗嗖
Hello, security.ssl.rest.*-password and s3.secret.key are parameters in flink-conf.xml that can only be set with plain text, which may lead to password leak. Can anyone provide some other extended capabilities that allow developers to configure cipher text and specify classes and methods to decr