[
https://issues.apache.org/jira/browse/AIRFLOW-5145?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16914281#comment-16914281
]
ASF subversion and git services commented on AIRFLOW-5145:
----------------------------------------------------------
Commit e5e7a9e0e9981975b56069459b6f3219240b70a3 in airflow's branch
refs/heads/master from Jonathan Stern
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=e5e7a9e ]
[AIRFLOW-5145] Don't show (confusing) is_encrypted checkbox in Variable screens
(#5761)
With webserver `rbac=True` and core fernet_key set, variable values are always
encrypted, but they are only marked as is_encrypted = true in the database if
the user explicitly checks the Is Encrypted checkbox on the variable create
screen. If a variable is set up this way, then it is not correctly displayed in
the UI and calls to Variable.get return the cipher text instead of the
decrypted value.
> rbac ui presents false choice to encrypt or not encrypt variable values
> -----------------------------------------------------------------------
>
> Key: AIRFLOW-5145
> URL: https://issues.apache.org/jira/browse/AIRFLOW-5145
> Project: Apache Airflow
> Issue Type: Bug
> Components: ui
> Affects Versions: 1.10.3, 1.10.4
> Reporter: Jon Stern
> Priority: Minor
>
> With webserver rbac=True and core fernet_key set, variable values are always
> encrypted, but they are only marked as is_encrypted = true in the database if
> the user explicitly checks the *Is Encrypted* checkbox on the variable create
> screen. If a variable is set up this way, then it is not correctly displayed
> in the UI and calls to Variable.get return the cipher text instead of the
> decrypted value.
> Workarounds are:
> * Explicitly check the box in the UI if you know you've got a fernet key set
> up.
> * Edit the variable after creation and re-enter the value. On the edit
> screen there is no checkbox, and is_encrypted is properly set to true on
> saving.
> Since the only right answer is is_encrypted = true, it seems like the
> checkbox should not be displayed (as in the edit screen and as in the
> non-rbac create screen)
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
