Skip to content

Commit 20e6664

Browse files
XD-DENGAlice Berard
authored and
Alice Berard
committed
[AIRFLOW-3295] Fix potential security issue in DaskExecutor (apache#4128)
When user decides to use TLS/SSL encryption for DaskExecutor communications, `Distributed.Security` object will be created. However, argument `require_encryption` is missed to be set to `True` (its default value is `False`). This may fail the TLS/SSL encryption setting-up.
1 parent 051ed22 commit 20e6664

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

airflow/executors/dask_executor.py

+1
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ def start(self):
4949
tls_client_key=self.tls_key,
5050
tls_client_cert=self.tls_cert,
5151
tls_ca_file=self.tls_ca,
52+
require_encryption=True,
5253
)
5354
else:
5455
security = None

0 commit comments

Comments
 (0)