xylaaaaa opened a new pull request, #63234:
URL: https://github.com/apache/doris/pull/63234
### What problem does this PR solve?
`SHOW CREATE CATALOG` currently prints sensitive catalog properties in plain
text. For Iceberg REST catalogs this exposes `iceberg.rest.oauth2.credential`,
which is commonly a PAT or similar secret.
This change ensures sensitive connector properties are masked in catalog DDL
output.
### Changes
- Register `IcebergRestProperties` sensitive keys in
`DatasourcePrintableMap.SENSITIVE_KEY`
- Add masking coverage for `iceberg.rest.oauth2.credential`
- Add a regression test for `SHOW CREATE CATALOG` to ensure the credential
is printed as `*XXX` instead of the raw value
### Verification
- Current workspace targeted tests passed for the same content:
`mvn -pl fe-core -am -Dtest=DatasourcePrintableMapTest,ExternalCatalogTest
-Dcheckstyle.skip=true -DfailIfNoTests=false -Dmaven.build.cache.enabled=false
test`
- Clean `origin/master` worktree code/test compilation succeeded through
`testCompile`, but `fe-core` test execution hit an unrelated surefire fork
configuration issue on master (`Error: could not open {argLine}`), so the
runtime test evidence is from the equivalent patch in the main workspace.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
