KIP-242 — Mask password in Kafka Connect Rest API response

Discussion Kafka 2.0.2 ConnectSecurity

Masks `PASSWORD`-type config fields in all Kafka Connect REST API responses (`/connectors/{name}`, `/connectors/{name}/config`, `/tasks`) by replacing their values with `[hidden]`. The REST API currently returns connector configurations including database passwords and secret keys in plaintext, exposing credentials to anyone with HTTP access to the Connect REST port.

Details