thelastpickle / cassandra-reaper

Automated Repair Awesomeness for Apache Cassandra
http://cassandra-reaper.io/
Apache License 2.0
490 stars 218 forks source link

Provide a way to encrypt password in authProvider #1312

Open nhtha opened 1 year ago

nhtha commented 1 year ago

Project board link

Please provide a way to encrypt password in authProvider in Cassandra section while using Cassandra as storageType.

"storageType: cassandra cassandra: clusterName: "test" contactPoints: ["127.0.0.1"] keyspace: reaper_db authProvider: type: plainText username: cassandra password: cassandra"

There should be a way to provide an encrypted password, may be like this: The authProvider then looks for a system property whose key is defined in systemPropertySecret for the value to decipher the password.

authProvider: type: encryptedText username: "myusername" password: "{cipher}e3a055c901e71c12f0a2f762f30a561bfd01c97d5ecbb430698b99025560144a" systemPropertySecret: SYS_PROPERTY_ENCRYPTION_KEY

In production system, we are really need the password to be encrypted.

Best Regards Ha Nguyen

┆Issue is synchronized with this Jira Story by Unito ┆Issue Number: REAP-51

adejanovski commented 1 year ago

I agree that would be nice to have this feature 👍