[ 
https://issues.apache.org/jira/browse/AIRFLOW-6560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17018285#comment-17018285
 ] 

Marcin Jasiński commented on AIRFLOW-6560:
------------------------------------------

Kombu version 4.6.3
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow'{code}
Kombu version 4.6.7
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:**@airflow-mysql:3306/airflow'{code}
You should bump (or remove) Kombu version :) 

https://github.com/apache/airflow/blob/73bf718358c01cc41e5f23b914a8824a2665a28c/setup.py#L161

> db password leaks to logs
> -------------------------
>
>                 Key: AIRFLOW-6560
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-6560
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: logging, security
>    Affects Versions: 1.10.6
>            Reporter: Marcin Jasiński
>            Priority: Critical
>
> I have configured Airflow metadata db as MySQL.
> {code:java}
> sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> After that I have used initdb command:
> {code:java}
> airflow initdb{code}
> Tables in the airflow db have been created.
> Then I have runed commands:
> {code:java}
> airflow worker{code}
> in logs:
> {code:java}
> [2020-01-14 18:39:03,457: INFO/MainProcess] Connected to 
> sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> password as a plain text.
> Probably comes that from Celery - 
> [https://github.com/celery/celery/blob/master/celery/worker/consumer/connection.py#L24]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to