You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@airflow.apache.org by "Dan Figueras (JIRA)" <ji...@apache.org> on 2019/08/02 09:44:00 UTC

[jira] [Created] (AIRFLOW-5097) Hide passwords on execution

Dan Figueras created AIRFLOW-5097:
-------------------------------------

             Summary: Hide passwords on execution
                 Key: AIRFLOW-5097
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-5097
             Project: Apache Airflow
          Issue Type: Improvement
          Components: logging
    Affects Versions: 1.10.3
            Reporter: Dan Figueras


When you set a Variable using the Airflow UI and you put anything that contains "password" or similar, the value gets hidden in the interface, but when you use those variables during the executing process they are printed in the Airflow log.

It would be good if it obfuscated the value before printing, like replacing the value for a series of `*`.

So instead of showing:

[2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="123password"

It would look like:
[2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="*********"



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)