logging properties should not be printing password

[cywjackson]

https://github.com/druid-io/druid/blob/master/services/src/main/java/io/druid/cli/GuiceRunnable.java#L86 should have some masking of password/sensitive properties' values

[drcrallen]

Agreed

[drcrallen]

Part of this is why startupLoggingConfig.isLogProperties exists. You can turn it off to prevent it here.

but it will STILL print it out as part of running an indexing task.

[drcrallen]

See #2464 and #2452 for related items

[cywjackson]

hah, didn't realize there's already a long discussion on this like #2452 . I'd very much like and want logging properties on start, but for sensitive data (url, name, passwd , etc), they should either be masked or don't print it at all. thx @drcrallen

[stale]

This issue has been marked as stale due to 280 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@druid.apache.org list. Thank you for your contributions.

[stale]

This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.