[ 
https://issues.apache.org/jira/browse/FLINK-36805?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17901387#comment-17901387
 ] 

zjjiang commented on FLINK-36805:
---------------------------------

I would like to introduce the Jasypt java library into the project flinkcdc-cli 
to support (unidirectional / bidirectional) cryptographic decryption when 
parsing pipeline definition files.

Jasypt is a java library which allows us to add basic encryption capabilities 
to the project with minimum effort, and without the need of having deep 
knowledge on how cryptography works. (ref: http://www.jasypt.org/)

> Add support for using encrypted passwords in pipeline definitions
> -----------------------------------------------------------------
>
>                 Key: FLINK-36805
>                 URL: https://issues.apache.org/jira/browse/FLINK-36805
>             Project: Flink
>          Issue Type: Improvement
>          Components: Flink CDC
>    Affects Versions: cdc-3.1.0, cdc-3.2.0, cdc-3.1.1, cdc-3.3.0
>            Reporter: zjjiang
>            Priority: Major
>
> When we use Flink CDC to submit jobs, we need to set passwords for connecting 
> to source and sink (e.g., mysql, doris, etc.) in plaintext in the pipeline 
> definition file(*.yaml), which may be a security risk. To avoid the use of 
> plaintext passwords, we would like the pipeline definition file to support 
> encrypted passwords.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to