Frank-T-Johansen opened a new issue, #27908:
URL: https://github.com/apache/airflow/issues/27908
### Apache Airflow version
2.4.3
### What happened
I tried to run "airflow db upgrade" after ugprading airflow from 2.4.2 to
2.4.3, but the command just hung.
When I did strace it was trying to connect to AWS ssm, which is odd as my
airflow installation is on a local server.
[root@<hostname> ~]# ps -ef|grep "db upgrade"
airflow 819024 819023 0 09:43 pts/1 00:00:02
/data01/airflow/.pyenv/versions/3.9.12/bin/python3.9
/data01/airflow/.pyenv/versions/3.9.12/bin/airflow db upgrade
root@<hostname> ~]# strace -f -p 819024
strace: Process 819024 attached with 8 threads
[...]
[pid 819024] connect(6, {sa_family=AF_INET, sin_port=htons(443),
sin_addr=inet_addr("52.95.123.56")}, 16) = -1 EINPROGRESS (Operation now in
progress)
[airflow@<hostname> ~]$ host ssm.eu-west-1.amazonaws.com
ssm.eu-west-1.amazonaws.com has address 52.95.123.56
Anyone have any clue as to why airflow would try to talk to AWS SSM from a
local server? Could hackers have injected code to steal our secrets?
Btw, AWS is configured on this local server on the account where airflow is
running, as it is being used for sending logs to s3.
But we don't use SSM for anything related to Airflow.
### What you think should happen instead
"airflow db upgrade" shouldn't talk to AWS, and should not hang.
### How to reproduce
Install 2.4.2, upgrade to 2.4.3, run airflow db upgrade
### Operating System
RedHat 8.6
### Versions of Apache Airflow Providers
apache-airflow-providers-amazon==6.1.0
apache-airflow-providers-common-sql==1.3.0
apache-airflow-providers-ftp==3.2.0
apache-airflow-providers-hashicorp==3.2.0
apache-airflow-providers-http==4.1.0
apache-airflow-providers-imap==3.0.0
apache-airflow-providers-odbc==3.1.2
apache-airflow-providers-oracle==3.5.0
apache-airflow-providers-slack==7.0.0
apache-airflow-providers-snowflake==4.0.0
apache-airflow-providers-sqlite==3.2.1
apache-airflow-providers-ssh==3.3.0
### Deployment
Virtualenv installation
### Deployment details
Python 3.9.12, using usual constraint file for airflow
### Anything else
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [X] I agree to follow this project's [Code of
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
