Wizard: Mask credentials

[Haarolean]

Discussed in https://github.com/kafbat/kafka-ui/discussions/647

^{Originally posted by AayushSaini101 November 6, 2024} Hi team, we are running kafka ui in the docker and in future planning to host it so that other team can use it, but the credentials are clearly visible is there way to mask the credentials thanks

[AayushSaini101]

@Haarolean Can you please prioritize this issue ?

[autometa101]

Did you by any chance opted for following property ? DYNAMIC_CONFIG_ENABLED="true"

[germanosin]

@autometa101 Thanks for a great point. Disabling dynamic configuration will prevent users from viewing secrets and credentials, but it will require using static configurations through server environment variables or a config file.

Masking secret fields is not a straightforward task, as secrets can appear in unstructured strings or properties, which is quite common in Kafka configurations.

In the future, I’d like to enable runtime secret retrieval from secure sources like Vault or AWS Secrets Manager. However, this would require significant effort, so I plan to postpone this feature and carefully consider its implementation before moving forward.

[autometa101]

@germanosin Yes, I use Terraform to pass configuration and avoid setting dynamic properties. P.S. Masking secret fields is absolutely essential for production servers.