Skip to content

Fix a series of secret logging leakage issues#585

Merged
YiDing-Duke merged 8 commits into
confluentinc:2.5from
YiDing-Duke:yi-2.5
Jun 7, 2021
Merged

Fix a series of secret logging leakage issues#585
YiDing-Duke merged 8 commits into
confluentinc:2.5from
YiDing-Duke:yi-2.5

Conversation

@YiDing-Duke

Copy link
Copy Markdown

This is a backport of #584

In addition, for baseline compatibility it partially backports 7e2fb89 to only include

  1. clients/src/main/java/org/apache/kafka/common/utils/ConfigUtils.java
  2. clients/src/test/java/org/apache/kafka/common/utils/ConfigUtilsTest.java

…methods

Current below log statements are not useful. This PR logs readable/masked configs during alterBrokerConfigs/alterTopicConfigs method call.

`[Admin Manager on Broker 1]: Updating topic test with new configuration kafka.server.KafkaConfigc9ba35e3`

Author: Manikumar Reddy <manikumar.reddy@gmail.com>

Reviewers: Rajini Sivaram <rajinisivaram@googlemail.com>, Chia-Ping Tsai <chia7712@gmail.com>

Closes apache#9824 from omkreddy/admin-logs
* rename whitelist/blacklist to include/exclude
* add utility methods to translate deprecated configs

Author: Xavier Léauté <xvrl@apache.org>

Reviewers: Gwen Shapira

Closes apache#9367 from xvrl/kafka-10570
…ache#3849)

This issue has been there for multiple years.

Also adjust the logging to only include overridden topic configs, I
_think_ this behavior changed unintentionally as part of the kraft work
(and made the original issue worse).

Unit test included and also tested manually.

Reviewer: Alok Nikhil <anikhil@confluent.io>, Kowshik Prakasam <kprakasam@confluent.io>
@YiDing-Duke YiDing-Duke merged commit ffa8ef4 into confluentinc:2.5 Jun 7, 2021
@YiDing-Duke YiDing-Duke deleted the yi-2.5 branch June 7, 2021 23:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants