Uploaded image for project: 'Apache Airflow'
  1. Apache Airflow
  2. AIRFLOW-6560

db password leaks to logs

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: 1.10.6
    • Fix Version/s: None
    • Component/s: logging, security
    • Labels:
      None

      Description

      I have configured Airflow metadata db as MySQL.

      sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow

      After that I have used initdb command:

      airflow initdb

      Tables in the airflow db have been created.

      Then I have runed commands:

      airflow worker

      in logs:

      [2020-01-14 18:39:03,457: INFO/MainProcess] Connected to sqla+mysql://airflow:airflow@localhost:3306/airflow

      password as a plain text.

      Probably comes that from Celery - https://github.com/celery/celery/blob/master/celery/worker/consumer/connection.py#L24

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              mkjasinski Marcin Jasiński
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: