[
https://issues.apache.org/jira/browse/AIRFLOW-5097?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16898828#comment-16898828
]
Dan Figueras edited comment on AIRFLOW-5097 at 8/2/19 11:56 AM:
----------------------------------------------------------------
The DAG definition is:
...
with DAG(dag_id='someID', default_args=default_args, schedule_interval=None)
as dag:
someOperator = BashOperator(
task_id='someTask',
bash_command='export GIT_DEVOPS_USER="\{{ var.value.git_devops_user }}" && \
export GIT_DEVOPS_PASSWORD="\{{ var.value.git_devops_password }}"
)
...
was (Author: dan.figueras):
The DAG definition is:
...
with DAG(dag_id='someID', default_args=default_args, schedule_interval=None) as
dag:
someOperator = BashOperator(
task_id='someTask',
bash_command='export GIT_DEVOPS_USER="{{ var.value.git_devops_user }}" && \
export GIT_DEVOPS_PASSWORD="{{ var.value.git_devops_password }}"
)
...
> Hide passwords on execution
> ---------------------------
>
> Key: AIRFLOW-5097
> URL: https://issues.apache.org/jira/browse/AIRFLOW-5097
> Project: Apache Airflow
> Issue Type: Improvement
> Components: logging
> Affects Versions: 1.10.3
> Reporter: Dan Figueras
> Priority: Major
>
> When you set a Variable using the Airflow UI and you put anything that
> contains "password" or similar, the value gets hidden in the interface, but
> when you use those variables during the executing process they are printed in
> the Airflow log.
> It would be good if it obfuscated the value before printing, like replacing
> the value for a series of `*`.
> So instead of showing:
> [2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command:
> export GIT_DEVOPS_USER="devops_user" && export
> GIT_DEVOPS_PASSWORD="123password"
> It would look like:
> [2019-08-02 09:32:12,896] \{{bash_operator.py:114}} INFO - Running command:
> export GIT_DEVOPS_USER="devops_user" && export GIT_DEVOPS_PASSWORD="*********"
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
