Skip to content

ATLAS-5189: Decrypt postgres password#499

Merged
chaitalicod merged 1 commit intoapache:masterfrom
chaitalicod:ATLAS-5189
Apr 21, 2026
Merged

ATLAS-5189: Decrypt postgres password#499
chaitalicod merged 1 commit intoapache:masterfrom
chaitalicod:ATLAS-5189

Conversation

@chaitalicod
Copy link
Copy Markdown
Contributor

@chaitalicod chaitalicod commented Jan 19, 2026

What changes were proposed in this pull request?

Approach:-:
Encryption:
Use cputil.py tool to encrypt password for key "atlas.graph.storage.rdbms.jpa.hikari.password" which will be then stored in jceks file along with password and Atlas will decrypt using new method added as getDecryptedPassword and set it in hikari data source

Expectation:-:
Encrypt password for rdbms db
atlas.graph.storage.rdbms.jpa.hikari.username=atlas
atlas.graph.storage.rdbms.jpa.hikari.password=password(we should set it as ********)
1.When a user will add password property in application.properties manually we should encrypt the password and send it to postgres
we should avoid plaintext password

How was this patch tested?

Created jceks file using below command
-k is for key
-p password to encrypt
-f jceks file path

Enter path for jceks file in atlas-application.properties to this key hadoop.security.credential.provider.path=jceks://file/home/chaitali/project/forkbranch/atlas/rdbms.jceks

./cputil.py -k atlas.graph.storage.rdbms.jpa.hikari.password -p password -f jceks://file/home/project/forkbranch/atlas/rdbms.jceks

Check in the file path your jceks file should be created now

Assign your provider path like below in atlas-application.properties file
hadoop.security.credential.provider.path=jceks://file/home/chaitali/project/forkbranch/atlas/rdbms.jceks

Assign password in * format to this hikari password property
atlas.graph.storage.rdbms.jpa.hikari.password=********

Please note it should be 8 * specifically

@pinal-shah
Copy link
Copy Markdown
Collaborator

Please change the JIRA title, to something like "Support decrypting masked postgres password"

@chaitalicod chaitalicod changed the title ATLAS-5189: Encrypt postgres password ATLAS-5189: Decrypt postgres password Apr 21, 2026
@chaitalicod chaitalicod merged commit ea52e9e into apache:master Apr 21, 2026
1 check passed
@chaitalicod chaitalicod deleted the ATLAS-5189 branch April 21, 2026 12:59
asf-gitbox-commits pushed a commit that referenced this pull request Apr 23, 2026
Co-authored-by: chaitali.borole <chaitali.borole@cloudera.com>
(cherry picked from commit ea52e9e)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants