DarioBalinzo / kafka-connect-elasticsearch-source

Kafka Connect Elasticsearch Source
Apache License 2.0
65 stars 38 forks source link

Security #76

Open satishcb opened 2 years ago

satishcb commented 2 years ago

Any solutions/suggestions in how we can avoid the plaintext password in the json files?

DarioBalinzo commented 2 years ago

The configuration of this connector respect the standart kafka connect configuration. Here you can find more info about it: https://docs.confluent.io/platform/current/connect/userguide.html

Using the rest api you are not forced to use curl as in the examples, but you can use any other tool (confluent monitoring gui https://www.confluent.io/product/confluent-platform/gui-driven-management-and-monitoring/ or any custom tool/script able to make rest request)

satishcb commented 2 years ago

Thanks for quick response. Will checkout the links provided. Just want to confirm that I was referring to the es.user and es.password fields.

Protocol-X commented 2 years ago

You can use any of the providers with newer versions of kafka to avoid plain text. https://docs.confluent.io/platform/current/connect/userguide.html#configprovider-interface