datahub/metadata-io

Metadata IO Module

This module contains the core metadata I/O services for DataHub, including system information collection and property management.

Security: Configuration Property Classification

Critical Test: PropertiesCollectorConfigurationTest enforces that all configuration properties are explicitly classified as either sensitive (redacted) or non-sensitive (visible in system info).

Why: Prevents accidental exposure of secrets through DataHub's system information endpoints.

When adding new properties: The test will fail with instructions on which classification list to add your property to. The test file contains comprehensive documentation on:

• The four classification lists (sensitive/non-sensitive, exact/template)
• Template syntax for dynamic properties ([*] for indices, * for segments)
• Security guidelines and examples

Test Command:

./gradlew :metadata-io:test --tests "*.PropertiesCollectorConfigurationTest"

Security Rule: When in doubt, classify as sensitive. This test is a mandatory security guardrail - never disable it.