minyk opened a new issue #1634:
URL: https://github.com/apache/incubator-kyuubi/issues/1634


   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   
   
   ### Search before asking
   
   - [X] I have searched in the 
[issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and 
found no similar issues.
   
   
   ### Describe the feature
   
   SparkSQLEngine's Kyuubi UI tab shows SQL statements. In some cases, these 
informations are secret information like S3 access/secret key. 
   
   ### Motivation
   
   Spark SQL UI tab already redact with `spark.redaction.string.regex` 
configuration. 
   
   ### Describe the solution
   
   Use the same property `spark.redaction.string.regex` from sparkConf and 
identically same function `redact`. Spark's `Utils.redact` is `private[spark]` 
so kyuubi should have the function in somewhere.
   
   See our PoC implementation: 
https://github.com/nexr/kyuubi/commit/756dc130ef7493199968f9bbe631ee8e084f50d8
    
   This prevents information leak from SparkSQLEngine's Kyuubi tab and Jobs tab.
   
   ### Additional context
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [X] Yes I am willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to