[
https://issues.apache.org/jira/browse/FLINK-21196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17281462#comment-17281462
]
Chesnay Schepler commented on FLINK-21196:
------------------------------------------
Security-wise we usually only focus on external connectivity (e.g., the REST
API / WebUI, clients, networking between nodes).
If an attacker has read access to such files then you have probably already
lost.
> Sensitive information(password) is in plain text format in flink-conf.yaml
> configuration file
> ---------------------------------------------------------------------------------------------
>
> Key: FLINK-21196
> URL: https://issues.apache.org/jira/browse/FLINK-21196
> Project: Flink
> Issue Type: Bug
> Components: Deployment / Scripts
> Affects Versions: 1.10.0, 1.11.3
> Reporter: Suchithra V N
> Priority: Major
>
> When ssecurit settings are enabled in flink configuration passwords
> information will be wriiten in flink-conf.yaml file as a plain text. If any
> attacker is able to access this file can use these paswords to decrypt the
> files. Hence secure mechanism is required to mask these senstive information
> from flink-conf.yaml file.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
