(seatunnel) branch dev updated: [Improve][Core] Warn that the base64 config shade does not encrypt anything (#12073)

[github-bot]

This is an automated email from the ASF dual-hosted git repository.

github-merge-queue[bot] pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/seatunnel.git


The following commit(s) were added to refs/heads/dev by this push:
     new 97d461bc07 [Improve][Core] Warn that the base64 config shade does not 
encrypt anything (#12073)
97d461bc07 is described below

commit 97d461bc0773399d632fd078735736ecd44f5f0b
Author: SEZ <20342912+s...@users.noreply.github.com>
AuthorDate: Sat Sep 5 06:00:28 2026 +0000

    [Improve][Core] Warn that the base64 config shade does not encrypt anything 
(#12073)
---
 .../org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java   | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git 
a/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java
 
b/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java
index 40ce48fcce..52fa94c6a1 100644
--- 
a/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java
+++ 
b/seatunnel-core/seatunnel-core-starter/src/main/java/org/apache/seatunnel/core/starter/utils/ConfigShadeUtils.java
@@ -168,6 +168,12 @@ public final class ConfigShadeUtils {
                 "Miss <Sink> config! Please check the config file.");
         try {
             ConfigShade configShade = CONFIG_SHADES.getOrDefault(identifier, 
DEFAULT_SHADE);
+            if (Base64ConfigShade.IDENTIFIER.equals(identifier)) {
+                log.warn(
+                        "Config shade '{}' encodes sensitive options, it does 
not encrypt them:"
+                                + " anyone who reads the config can decode the 
values.",
+                        Base64ConfigShade.IDENTIFIER);
+            }
             // call open method before the encrypt/decrypt
             configShade.open(props);