-
Notifications
You must be signed in to change notification settings - Fork 13
Open
Description
Describe the bug
The logging of Kafka Configs / Components configs leaks passwords.
To Reproduce
Steps to reproduce the behavior:
configure something like
kafka.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required \
username="monitoring" \
password="very-secret-password";
kafka.ssl.truststore.password=another-password
kafka-consumer-lag-monitoring logs Kafka Configs as
Kafka Configs: {ssl.truststore.password=another-password, security.protocol=SASL_SSL, ssl.endpoint.identification.algorithm=, ssl.truststore.location=/etc/ssl/certs/java/cacerts, bootstrap.servers=..., sasl.mechanism=PLAIN, sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="monitor" password="very-secret-password";, client.id=kafka-lag-exporter, ssl.truststore.type=PKCS12}
Expected behavior
kafka-consumer-lag-monitoring logs Kafka Configs as
Kafka Configs: {ssl.truststore.password=[REDACTED], security.protocol=SASL_SSL, ssl.endpoint.identification.algorithm=, ssl.truststore.location=/etc/ssl/certs/java/cacerts, bootstrap.servers=..., sasl.mechanism=PLAIN, sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule required username="monitor" password="[REDACTED]";, client.id=kafka-lag-exporter, ssl.truststore.type=PKCS12}
Metadata
Metadata
Assignees
Labels
No labels