You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Marcin Jasiński (Jira)" <ji...@apache.org> on 2020/01/15 07:18:00 UTC
[jira] [Updated] (AIRFLOW-6560) db password leaks to logs
[ https://issues.apache.org/jira/browse/AIRFLOW-6560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Marcin Jasiński updated AIRFLOW-6560:
-------------------------------------
Description:
I have configured Airflow metadata db as MySQL.
{code:java}
sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
After that I have used initdb command:
{code:java}
airflow initdb{code}
Tables in the airflow db have been created.
Then I have runed commands:
{code:java}
airflow scheduler
airflow webserver -p 8080{code}
in logs:
{code:java}
[2020-01-14 18:39:03,457: INFO/MainProcess] Connected to sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
password as a plain text.
was:
I have configured Airflow metadata db as MySQL.
{code:java}
sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
After that I have used initdb command:
{code:java}
airflow initdb{code}
Tables in the airflow db have been created.
Then I have runed command:
{code:java}
airflow webserver -p 8080{code}
in logs:
{code:java}
[2020-01-14 18:39:03,457: INFO/MainProcess] Connected to sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
password as a plain text.
> db password leaks to logs
> -------------------------
>
> Key: AIRFLOW-6560
> URL: https://issues.apache.org/jira/browse/AIRFLOW-6560
> Project: Apache Airflow
> Issue Type: Bug
> Components: logging, security
> Affects Versions: 1.10.6
> Reporter: Marcin Jasiński
> Priority: Critical
>
> I have configured Airflow metadata db as MySQL.
> {code:java}
> sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> After that I have used initdb command:
> {code:java}
> airflow initdb{code}
> Tables in the airflow db have been created.
> Then I have runed commands:
> {code:java}
> airflow scheduler
> airflow webserver -p 8080{code}
> in logs:
> {code:java}
> [2020-01-14 18:39:03,457: INFO/MainProcess] Connected to sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> password as a plain text.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)