在 Camel 指标中禁用 camel-debezium-mysql 端点 URI

Question

完整的 Debezium MySQL URI 字符串显示在指标中。它以明文形式显示 MySQL 用户和密码，这是不安全的。如何禁用此功能？我遵循了这个设置 here.

更多信息：

使用 quarkus 1.11.1.Final，它使用 camel 3.7.0 with debezium-connector-mysql 1.3.1.Final

这是骆驼路线：

from("debezium-mysql:" + config.getConnectorName()
            + "?databaseHostname=" + config.getHost()
            + "&databasePort=" + config.getPort()
            + "&databaseUser=" + config.getUser()
            + "&databasePassword=" + config.getPassword()
            + "&databaseServerName=" + config.getDatabaseServerName()
            + "&databaseServerId=" + config.getDatabaseServerId()
            + "&databaseIncludeList=" + config.getDatabases()
            + "&tableIncludeList=" + config.getTables()
            + "&columnIncludeList=" + config.getColumns()
            + "&databaseHistoryFileFilename=" + config.getHistoryFile()
            + "&offsetStorageFileName=" + config.getStorageFile()
            + "&exchangePattern=InOnly")
            .routeId("debezium")
            .process(outgoingProcessor)
            .marshal().json(JsonLibrary.Jackson)
            .to(ExchangePattern.InOnly, outgoingUri)
            .to("micrometer:counter:outgoing.counter")
            .end();

访问 /q/metrics 的指标时，我发现了这个条目：

# HELP CamelExchangeEventNotifier_seconds_max
# TYPE CamelExchangeEventNotifier_seconds_max gauge
CamelExchangeEventNotifier_seconds_max{camelContext="camel-1", endpointName="debezium-mysql://entire connection string here with user and password", eventType="ExchangeCompletedEvent", failed="false", serviceName="MicrometerEventNotifierService",} 0.0

Answer 1

感谢您提出这个问题。我已经创建 a Jira ticket 来在即将发布的 Camel 版本中修复此问题，以屏蔽指标中那些事件中的敏感数据。

在 Camel 指标中禁用 camel-debezium-mysql 端点 URI

Disable camel-debezium-mysql endpoint URI in Camel metrics

mysql

apache-camel

debezium