Hao Hao has uploaded a new change for review.

  http://gerrit.cloudera.org:8080/6043

Change subject: KUDU-1844: /varz should not expose potentially sensitive configs
......................................................................

KUDU-1844: /varz should not expose potentially sensitive configs

This adds a new flag tag 'sensitive' and a new flag --redact_sensitive_flags.

If a flag is tagged as 'sensitive', and --redact_sensitive_flags is set to
true, then its value would be redacted as '<redact>' when using /varz to
dump the flags or logging. So that it would not be exposed neither via WebUI
nor logging.

Example output with flags redacted:
  --test_sensitive_flag=<redacted>

Change-Id: I7661e0409c79559f22b07e7c12737e804544186b
---
M src/kudu/server/default-path-handlers.cc
M src/kudu/server/webserver-test.cc
M src/kudu/util/flag_tags-test.cc
M src/kudu/util/flag_tags.h
M src/kudu/util/flags.cc
M src/kudu/util/flags.h
M src/kudu/util/logging.cc
M src/kudu/util/logging.h
8 files changed, 83 insertions(+), 4 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/43/6043/1
-- 
To view, visit http://gerrit.cloudera.org:8080/6043
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7661e0409c79559f22b07e7c12737e804544186b
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Hao Hao <hao....@cloudera.com>

Reply via email to