[
https://issues.apache.org/jira/browse/BEAM-6292?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16798122#comment-16798122
]
Ismaël Mejía commented on BEAM-6292:
------------------------------------
[~mblmat] [ValueProvider support was merged for the Read part this
week|https://github.com/apache/beam/blob/c961139c9e3cf41e1f90b3410d13ed7ce675e3c7/sdks/java/io/cassandra/src/main/java/org/apache/beam/sdk/io/cassandra/CassandraIO.java#L257]
(the PR for the write part is in process but if you need it in the next
release I can provide a quick PR to cover user/password quickly). So your use
case will be fully supported and additionally the ValueProvider solution is
more generic and more Beam API friendly.
I think that a generic `GoogleCloudKmsValueProvider` is a pretty nice
contribution, and if you are willing to contribute it feel free to create a new
Jira, I will be glad to do the review.
> PasswordDecrypter: Delay decryption / Avoid serialization
> ---------------------------------------------------------
>
> Key: BEAM-6292
> URL: https://issues.apache.org/jira/browse/BEAM-6292
> Project: Beam
> Issue Type: Improvement
> Components: io-java-cassandra
> Reporter: Mathieu Blanchard
> Assignee: Mathieu Blanchard
> Priority: Minor
> Labels: triaged
> Fix For: 2.12.0
>
> Time Spent: 10h 40m
> Remaining Estimate: 0h
>
> Currently, the password is decrypted before the serialization of the pipeline
> and this causes the raw version to be visible to everyone on the staging
> location.
> To avoid this, we delayed the decryption of the password when connecting to
> the cluster, which ensures that the raw password is never serialized in the
> pipeline.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
