Is there a way to store service configuration property in encrypted or encoded form in Ambari DB?

[#1]

Ambari stores the service configuration in postgresql DB. My service has password property as a part of configuration file, i want it to be stored in enrypted/encoded form.Is there any way to do that? I have checked in Ambari DB but it stored in plain text for my service. How Hive & oozie stored their DB credential ?

<property require-input="true">

<name>password</name>

<value> </value>

<property-type>PASSWORD</property-type>

<display-name>DB password</display-name>

<description>DB password.</description>

<value-attributes>

<type>password</type>

<overridable>false</overridable>

</value-attributes>

</property>

[#2]

@vpoornalingam

[#3]

@Kuldeep Kulkarni

Yes - we could run "ambari-server setup-security" and select the option for Encryption.

Ambari Encrypt passwords

Its better to use Ambari 2.2 or above, wherein clear text passwords are taken care of.

[#4]

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

[#5]

@Shashank Rai

[#6]

Thanks for your response. @vpoornalingam

I am using ambari 2.3.2 , but still configuration property for my custom service gets stored in plain text format.

I tried with "ambari-server setup-security" but it encrypted the postgres db password. Not my custom service user entered password.

This seems a blocker to me, waited too long for a response but haven't received any satisfactory response.

Please, can somebody confirm whether ambari has a support for encryption/encoding for service configuration parameters? @Arun C. Murthy

Any help would be appreciated

[#7]

I have gone through the Ambari docs, but haven't found anything. Before I can made any conclusion regarding 'to encrypt configuration property entered by user for service' I want somebody to confirm the same about ambari support this use-case or not. @vpoornalingam @Kuldeep Kulkarni

Any help would be appreciated.

[#8 · Accepted solution]

@Shashank Rai Not currently supported but planned for 3.0: See https://issues.apache.org/jira/browse/AMBARI-19109

[#9]

Thanks @Ali Bajwa