feat: sensitive data encryption (#1818)

feat: mask encrypted config values in SCT logs

Keep plaintext out of refresh and group-load logs by tracking encrypted keys and replacing values with length plus a per-process salted fingerprint.

Co-authored-by: Cursor cursoragent@cursor.com

fix: keep config fallback and polarisconfig endpoint usable

Serialize actuator polarisconfig as safe DTOs so ClientId is reachable, honor local-file-root-path for remote cache, and continue startup from existing cache when the config server is unreachable.

Co-authored-by: Cursor cursoragent@cursor.com

fix: attribute encrypted config by file for logs and ACK

Pass EffectiveValue.sourceFile to the SDK, register keys from ConfigKVFile.isEncrypted() on group add, and omit group DEBUG maps only when the composite file is encrypted.

Co-authored-by: Cursor cursoragent@cursor.com

fix: mark non-Polaris effective values as EXTERNAL

Tell the SDK that command-line and env overrides are not config-center files, so ACK can keep those effective values when an encrypted file is also watched.

Co-authored-by: Cursor cursoragent@cursor.com

chore(docs): 更新 CHANGELOG 链接至 PR 1818

Signed-off-by: evelynwei evelynwei@tencent.com

refactor: hide test-only encrypted key set reset

Keep clearEncryptedPropertyKeys() package-private so it is not part of the public API.

Co-authored-by: Cursor cursoragent@cursor.com

Signed-off-by: evelynwei evelynwei@tencent.com Co-authored-by: evelynwei evelynwei@tencent.com Co-authored-by: Cursor cursoragent@cursor.com

Spring Cloud Tencent

English | 简体中文

README:

Introduction
How to build
How to use
Examples

Visit Wiki to learn more

Introduction

Spring Cloud Tencent is an one-stop microservice solution which implements the standard Spring Cloud SPI. It integrates Spring Cloud with Tencent middlewares and makes it easy to develop microservice.

Service discovery and governance

Spring Cloud Tencent integrates Spring Cloud with Polaris which is an open source system for service discovery and governance.

Polaris Github

Spring Cloud with Polaris can solve these problem:

service management: service discovery, service registry and health check
traffic control: customizable routing, load balance, rate limiting and access control
fault tolerance: circuit breaker for service, interface and instance
config management: config version control, grayscale release and dynamic update

How to build

Run these commands to build this project as follow.

Linux and Mac

./mvnw clean package

Windows

.\mvnw.cmd clean package

How to use

All the components of Spring Cloud Tencent have been uploaded to the Maven central repository, just need to introduce dependencies.

Notice: The version list of Spring Cloud Tencent can be found in Spring Cloud Tencent Version Management .

For example:

<!-- add spring-cloud-tencent bom  -->
<dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>com.tencent.cloud</groupId>
            <artifactId>spring-cloud-tencent-dependencies</artifactId>
            <version>${LATEST_VERSION_FROM_VERSION_MANAGEMENT_IN_WIKI}</version>
            <type>pom</type>
            <scope>import</scope>
        </dependency>
    </dependencies>
</dependencyManagement>    
                 
<!-- add spring-cloud-starter-tencent-polaris-discovery dependency  -->
<dependencies>
    <dependency>
        <groupId>com.tencent.cloud</groupId>
        <artifactId>spring-cloud-starter-tencent-polaris-discovery</artifactId>
    </dependency>
</dependencies>

Examples

The experience environment of Polaris is provided for developers:

Polaris Console
Polaris Server Address: grpc://119.91.66.223:8091

The address of Polaris server in spring-cloud-tencent-example is grpc://119.91.66.223:8091 by default.

Chat Group

Please scan the QR code to add WeChat, and send “Spring Cloud Tencent” to apply for joining the group.

Stargazers over time

If you are interested in Spring Cloud Tencent, please follow our project, thank you very much.