This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/dev/pr-12073-7df6c9467a52bb3da95ee6ef77de9f000dc0da6d in repository https://gitbox.apache.org/repos/asf/seatunnel.git
commit 97d461bc0773399d632fd078735736ecd44f5f0b Author: SEZ <[email protected]> AuthorDate: Sat Sep 5 06:00:28 2026 +0000 [Improve][Core] Warn that the base64 config shade does not encrypt anything (#12073) --- .../org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java b/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java index 40ce48fcce..52fa94c6a1 100644 --- a/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java +++ b/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java @@ -168,6 +168,12 @@ public final class ConfigShadeUtils { "Miss <Sink> config! Please check the config file."); try { ConfigShade configShade = CONFIG_SHADES.getOrDefault(identifier, DEFAULT_SHADE); + if (Base64ConfigShade.IDENTIFIER.equals(identifier)) { + log.warn( + "Config shade '{}' encodes sensitive options, it does not encrypt them:" + + " anyone who reads the config can decode the values.", + Base64ConfigShade.IDENTIFIER); + } // call open method before the encrypt/decrypt configShade.open(props);
