[
https://issues.apache.org/jira/browse/AIRFLOW-6560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17018285#comment-17018285
]
Marcin Jasiński edited comment on AIRFLOW-6560 at 1/17/20 8:31 PM:
-------------------------------------------------------------------
Kombu version 4.6.3
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow'{code}
Kombu version 4.6.7
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:**@airflow-mysql:3306/airflow'{code}
You should bump (or remove like on master branch) Kombu version :)
[https://github.com/apache/airflow/blob/73bf718358c01cc41e5f23b914a8824a2665a28c/setup.py#L161]
After bumping:
{code:java}
[2020-01-17 21:28:32,313: INFO/MainProcess] Connected to
sqla+mysql://airflow:**@airflow-mysql:3306/airflow
[2020-01-17 21:28:32,427: INFO/MainProcess] celery@8085c534fdac ready.{code}
was (Author: mkjasinski):
Kombu version 4.6.3
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow'{code}
Kombu version 4.6.7
{code:java}
>>> from kombu.connection import Connection
>>> c = Connection("sqla+mysql://airflow:airflow@airflow-mysql:3306/airflow")
>>> c.as_uri()
'sqla+mysql://airflow:**@airflow-mysql:3306/airflow'{code}
You should bump (or remove like on master branch) Kombu version :)
[https://github.com/apache/airflow/blob/73bf718358c01cc41e5f23b914a8824a2665a28c/setup.py#L161]
> db password leaks to logs
> -------------------------
>
> Key: AIRFLOW-6560
> URL: https://issues.apache.org/jira/browse/AIRFLOW-6560
> Project: Apache Airflow
> Issue Type: Bug
> Components: logging, security
> Affects Versions: 1.10.6
> Reporter: Marcin Jasiński
> Priority: Critical
>
> I have configured Airflow metadata db as MySQL.
> {code:java}
> sql_alchemy_conn = sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> After that I have used initdb command:
> {code:java}
> airflow initdb{code}
> Tables in the airflow db have been created.
> Then I have runed commands:
> {code:java}
> airflow worker{code}
> in logs:
> {code:java}
> [2020-01-14 18:39:03,457: INFO/MainProcess] Connected to
> sqla+mysql://airflow:airflow@localhost:3306/airflow{code}
> password as a plain text.
> Probably comes that from Celery -
> [https://github.com/celery/celery/blob/master/celery/worker/consumer/connection.py#L24]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)