HADOOP-15839. Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys. Contributed by Steve Loughran.
(cherry picked from commit cdc4350718055189fef8c70e31314607001d4009) Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/1ee09906 Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/1ee09906 Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/1ee09906 Branch: refs/heads/branch-3.2 Commit: 1ee09906cebd0a5d5ce986346ff96b8810036e8c Parents: 145c7aa Author: Steve Loughran <[email protected]> Authored: Wed Oct 10 17:02:00 2018 +0100 Committer: Steve Loughran <[email protected]> Committed: Wed Oct 10 17:02:00 2018 +0100 ---------------------------------------------------------------------- .../hadoop-common/src/main/resources/core-default.xml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/1ee09906/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml b/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml index 3b86f72..855b5da 100644 --- a/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml +++ b/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml @@ -599,9 +599,17 @@ secret$ password$ ssl.keystore.pass$ - fs.s3.*[Ss]ecret.?[Kk]ey + fs.s3a.server-side-encryption.key fs.s3a.*.server-side-encryption.key + fs.s3a.secret.key + fs.s3a.*.secret.key + fs.s3a.session.key + fs.s3a.*.session.key + fs.s3a.session.token + fs.s3a.*.session.token fs.azure.account.key.* + fs.azure.oauth2.* + fs.adl.oauth2.* credential$ oauth.*secret oauth.*password --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
