HADOOP-15839. Review + update cloud store sensitive keys in hadoop.security.sensitive-config-keys. Contributed by Steve Loughran.
(cherry picked from commit cdc4350718055189fef8c70e31314607001d4009) Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/2a305efd Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/2a305efd Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/2a305efd Branch: refs/heads/branch-3.1 Commit: 2a305efd4e211d3c4db88494aa382ae2f2ce97ae Parents: a0060cf Author: Steve Loughran <[email protected]> Authored: Wed Oct 10 17:03:06 2018 +0100 Committer: Steve Loughran <[email protected]> Committed: Wed Oct 10 17:03:06 2018 +0100 ---------------------------------------------------------------------- .../hadoop-common/src/main/resources/core-default.xml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/2a305efd/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml b/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml index 0c3f43d..954f6de 100644 --- a/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml +++ b/hadoop-common-project/hadoop-common/src/main/resources/core-default.xml @@ -599,9 +599,17 @@ secret$ password$ ssl.keystore.pass$ - fs.s3.*[Ss]ecret.?[Kk]ey + fs.s3a.server-side-encryption.key fs.s3a.*.server-side-encryption.key + fs.s3a.secret.key + fs.s3a.*.secret.key + fs.s3a.session.key + fs.s3a.*.session.key + fs.s3a.session.token + fs.s3a.*.session.token fs.azure.account.key.* + fs.azure.oauth2.* + fs.adl.oauth2.* credential$ oauth.*token$ hadoop.security.sensitive-config-keys --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
