[FLINK-38035][Python][PythonEnvUtils] Redact sensitive env vars in PythonEnvUtils logging (#26803)

vssakuru · ZombieSud · web-flow · commit 31785e076c86 · 2025-07-23T20:58:32.000+02:00
Co-authored-by: Rahul Sud &lt;rahul.sud@gmail.com&gt;
diff --git a/flink-python/src/main/java/org/apache/flink/client/python/PythonEnvUtils.java b/flink-python/src/main/java/org/apache/flink/client/python/PythonEnvUtils.java
@@ -20,6 +20,7 @@
 
 import org.apache.flink.client.deployment.application.UnsuccessfulExecutionException;
 import org.apache.flink.configuration.ConfigConstants;
+import org.apache.flink.configuration.ConfigurationUtils;
 import org.apache.flink.configuration.ReadableConfig;
 import org.apache.flink.core.fs.Path;
 import org.apache.flink.python.util.PythonDependencyUtils;
@@ -368,10 +369,9 @@ static Process startPythonProcess(
             // set the child process the output same as the parent process.
             pythonProcessBuilder.redirectOutput(ProcessBuilder.Redirect.INHERIT);
         }
-
         LOG.info(
                 "Starting Python process with environment variables: {{}}, command: {}",
-                env.entrySet().stream()
+                ConfigurationUtils.hideSensitiveValues(env).entrySet().stream()
                         .map(e -> e.getKey() + "=" + e.getValue())
                         .collect(Collectors.joining(", ")),
                 String.join(" ", commands));
