Dan Figueras created AIRFLOW-5097:
-------------------------------------

             Summary: Hide passwords on execution
                 Key: AIRFLOW-5097
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-5097
             Project: Apache Airflow
          Issue Type: Improvement
          Components: logging
    Affects Versions: 1.10.3
            Reporter: Dan Figueras


When you set a Variable using the Airflow UI and you put anything that contains 
"password" or similar, the value gets hidden in the interface, but when you use 
those variables during the executing process they are printed in the Airflow 
log.

It would be good if it obfuscated the value before printing, like replacing the 
value for a series of `*`.

So instead of showing:

[2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: 
export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="123password"

It would look like:
[2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command: 
export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="*********"



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

Reply via email to