centraldogma-0.63.1

⭐️ New features

• You can now define confidential properties using variables in the configuration file, seamlessly converted through ConfigValueConverter.
  This bolsters the security of Central Dogma configuration, mitigating the potential risk of exposing sensitive information. #890
  • For example:
    • The configuration file (dogma.json):

      {
        ...
        tls: {
          "password": "encryption:./path/to/encrypted/file"
          ...
        },
        ...
      }

    • The converter loaded via SPI:

      public class MyConfigValueConverter extends ConfigValueConverter {
        public List<String> supportedPrefixes() {
          return List.of("encryption");
        }
      
        public String convert(String prefix, String value) {
          if ("./path/to/encrypted/file".equals(value)) {
            // load the file and decrypt the content.
          }
          ...
        }
      }

  • Here is the list of confidential properties that the converter supports:
    • replication.secret
    • tls.keyCertChain
    • tls.key
    • authentication.properties.keyStore.password (when SAML is used)
    • authentication.properties.keyStore.keyPasswords (when SAML is used)

⛓️ Dependencies

• Armeria 1.26.1 → 1.26.2

Thank you

This release was possible thanks to the following contributors who shared their brilliant ideas and awesome pull requests:

• @jrhee17
• @ikhoon
• @minwoox
• @trustin