JoshuaChen commented on PR #34243:
URL: https://github.com/apache/shardingsphere/pull/34243#issuecomment-2571534943

   Um~I believe compliance requirements are not personal preferences but 
mandatory rules. In China, we have security classification protection 
requirements, while multinational companies must comply with various 
regulations in different countries.
   
   Here’s a simple example: In AWS, sensitive keys, like database passwords, 
should be stored in AWS Secrets Manager. They should not appear in environment 
variables or system properties because this could expose the database password 
to unauthorized users. In private infrastructure, such keys should be stored in 
tools like HashiCorp Vault or similar products.
   
   Additionally, for an open-source product, I agree that it should remain 
simple enough to use. However, I also believe it needs a certain level of 
flexibility so that others can extend it based on their specific needs. Within 
the scope of this PR, I am only providing the ability for others to extend 
properties with additional data sources.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to