You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Dan Figueras (JIRA)" <ji...@apache.org> on 2019/08/02 11:56:00 UTC
[jira] [Comment Edited] (AIRFLOW-5097) Hide passwords on execution
[ https://issues.apache.org/jira/browse/AIRFLOW-5097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16898828#comment-16898828 ]
Dan Figueras edited comment on AIRFLOW-5097 at 8/2/19 11:56 AM:
----------------------------------------------------------------
The DAG definition is:
...
with DAG(dag_id='someID', default_args=default_args, schedule_interval=None) as dag:
someOperator = BashOperator(
task_id='someTask',
bash_command='export GIT_DEVOPS_USER="\{{ var.value.git_devops_user }}" && \
export GIT_DEVOPS_PASSWORD="\{{ var.value.git_devops_password }}"
)
...
was (Author: dan.figueras):
The DAG definition is:
...
with DAG(dag_id='someID', default_args=default_args, schedule_interval=None) as dag:
someOperator = BashOperator(
task_id='someTask',
bash_command='export GIT_DEVOPS_USER="{{ var.value.git_devops_user }}" && \
export GIT_DEVOPS_PASSWORD="{{ var.value.git_devops_password }}"
)
...
> Hide passwords on execution
> ---------------------------
>
> Key: AIRFLOW-5097
> URL: https://issues.apache.org/jira/browse/AIRFLOW-5097
> Project: Apache Airflow
> Issue Type: Improvement
> Components: logging
> Affects Versions: 1.10.3
> Reporter: Dan Figueras
> Priority: Major
>
> When you set a Variable using the Airflow UI and you put anything that contains "password" or similar, the value gets hidden in the interface, but when you use those variables during the executing process they are printed in the Airflow log.
> It would be good if it obfuscated the value before printing, like replacing the value for a series of `*`.
> So instead of showing:
> [2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="123password"
> It would look like:
> [2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="*********"
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)