Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🎉 Redshift Source and Destination set SSL as default option #7234

Merged
merged 6 commits into from
Oct 22, 2021

Conversation

VitaliiMaltsev
Copy link
Contributor

@VitaliiMaltsev VitaliiMaltsev commented Oct 21, 2021

What

We want to create secure-only versions of connectors that can be used in the Airbyte cloud. The idea is that these connectors inherently prevent certain insecure connections such as connecting to a database over the public internet without encryption.

How

Modified the connectors spec to hide any options which allow the user to disable TLS. Changed the connector to enable TLS by default if the TLS option is not specified

Pre-merge Checklist

Expand the relevant checklist and delete the others.

New Connector

Community member or Airbyter

  • Community member? Grant edit access to maintainers (instructions)
  • Secrets in the connector's spec are annotated with airbyte_secret
  • Unit & integration tests added and passing. Community members, please provide proof of success locally e.g: screenshot or copy-paste unit, integration, and acceptance test output. To run acceptance tests for a Python connector, follow instructions in the README. For java connectors run ./gradlew :airbyte-integrations:connectors:<name>:integrationTest.
  • Code reviews completed
  • Documentation updated
    • Connector's README.md
    • Connector's bootstrap.md. See description and examples
    • docs/SUMMARY.md
    • docs/integrations/<source or destination>/<name>.md including changelog. See changelog example
    • docs/integrations/README.md
    • airbyte-integrations/builds.md
  • PR name follows PR naming conventions
  • Connector added to connector index like described here

Airbyter

If this is a community PR, the Airbyte engineer reviewing this PR is responsible for the below items.

  • Create a non-forked branch based on this PR and test the below items on it
  • Build is successful
  • Credentials added to Github CI. Instructions.
  • /test connector=connectors/<name> command is passing.
  • New Connector version released on Dockerhub by running the /publish command described here

Updating a connector

Community member or Airbyter

  • Grant edit access to maintainers (instructions)
  • Secrets in the connector's spec are annotated with airbyte_secret
  • Unit & integration tests added and passing. Community members, please provide proof of success locally e.g: screenshot or copy-paste unit, integration, and acceptance test output. To run acceptance tests for a Python connector, follow instructions in the README. For java connectors run ./gradlew :airbyte-integrations:connectors:<name>:integrationTest.
  • Code reviews completed
  • Documentation updated
    • Connector's README.md
    • Connector's bootstrap.md. See description and examples
    • Changelog updated in docs/integrations/<source or destination>/<name>.md including changelog. See changelog example
  • PR name follows PR naming conventions
  • Connector version bumped like described here

Airbyter

If this is a community PR, the Airbyte engineer reviewing this PR is responsible for the below items.

  • Create a non-forked branch based on this PR and test the below items on it
  • Build is successful
  • Credentials added to Github CI. Instructions.
  • /test connector=connectors/<name> command is passing.
  • New Connector version released on Dockerhub by running the /publish command described here

Connector Generator

  • Issue acceptance criteria met
  • PR name follows PR naming conventions
  • If adding a new generator, add it to the list of scaffold modules being tested
  • The generator test modules (all connectors with -scaffold in their name) have been updated with the latest scaffold by running ./gradlew :airbyte-integrations:connector-templates:generator:testScaffoldTemplates then checking in your changes
  • Documentation which references the generator is updated as needed.

@github-actions github-actions bot added the area/connectors Connector related issues label Oct 21, 2021
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


vmaltsev seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

@VitaliiMaltsev VitaliiMaltsev temporarily deployed to more-secrets October 21, 2021 07:41 Inactive
@github-actions github-actions bot added the area/documentation Improvements or additions to documentation label Oct 21, 2021
@VitaliiMaltsev VitaliiMaltsev temporarily deployed to more-secrets October 21, 2021 07:49 Inactive
@jrhizor jrhizor temporarily deployed to more-secrets October 21, 2021 07:51 Inactive
@jrhizor jrhizor temporarily deployed to more-secrets October 21, 2021 07:52 Inactive
@VitaliiMaltsev VitaliiMaltsev changed the title Redshift Source and Restination set SSL as default option 🎉 Redshift Source and Restination set SSL as default option Oct 21, 2021
@alexandr-shegeda alexandr-shegeda changed the title 🎉 Redshift Source and Restination set SSL as default option 🎉 Redshift Source and Destination set SSL as default option Oct 21, 2021
Copy link
Contributor

@alexandr-shegeda alexandr-shegeda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@@ -112,6 +112,7 @@ See [docs](https://docs.aws.amazon.com/redshift/latest/dg/r_Character_types.html

| Version | Date | Pull Request | Subject |
| :------ | :-------- | :----- | :------ |
| 0.3.18 | 2021-10-21 | [7234](https://github.com/airbytehq/airbyte/pull/7234) | Allow SSL traffic only |
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should also add a line in both .md documents that makes it clear to the user that we only use encrypted traffic

import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.node.ObjectNode;
import io.airbyte.commons.json.Jsons;
import io.airbyte.commons.string.Strings;
import io.airbyte.db.Database;
import io.airbyte.db.Databases;

public class RedshiftDestinationAcceptanceTestSSL extends RedshiftCopyDestinationAcceptanceTest {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can remove the SSL test since all tests would be using SSL

@VitaliiMaltsev
Copy link
Contributor Author

VitaliiMaltsev commented Oct 22, 2021

/test connector=connectors/source-redshift

🕑 connectors/source-redshift https://github.com/airbytehq/airbyte/actions/runs/1371111676
✅ connectors/source-redshift https://github.com/airbytehq/airbyte/actions/runs/1371111676
No Python unittests run

@VitaliiMaltsev VitaliiMaltsev temporarily deployed to more-secrets October 22, 2021 07:01 Inactive
@jrhizor jrhizor temporarily deployed to more-secrets October 22, 2021 07:03 Inactive
@VitaliiMaltsev
Copy link
Contributor Author

VitaliiMaltsev commented Oct 22, 2021

/test connector=connectors/destination-redshift

🕑 connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371158597
✅ connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371158597
Python tests coverage:

	 ---------- coverage: platform linux, python 3.8.10-final-0 -----------
	 Name                                                              Stmts   Miss  Cover
	 -------------------------------------------------------------------------------------
	 main_dev_transform_catalog.py                                         3      3     0%
	 main_dev_transform_config.py                                          3      3     0%
	 normalization/__init__.py                                             4      0   100%
	 normalization/destination_type.py                                    12      0   100%
	 normalization/transform_catalog/__init__.py                           2      0   100%
	 normalization/transform_catalog/catalog_processor.py                143     77    46%
	 normalization/transform_catalog/destination_name_transformer.py     120      6    95%
	 normalization/transform_catalog/reserved_keywords.py                 11      0   100%
	 normalization/transform_catalog/stream_processor.py                 370    218    41%
	 normalization/transform_catalog/table_name_registry.py              174     34    80%
	 normalization/transform_catalog/transform.py                         45     26    42%
	 normalization/transform_catalog/utils.py                             33      7    79%
	 normalization/transform_config/__init__.py                            2      0   100%
	 normalization/transform_config/transform.py                         140     29    79%
	 -------------------------------------------------------------------------------------
	 TOTAL                                                              1062    403    62%

@jrhizor jrhizor temporarily deployed to more-secrets October 22, 2021 07:17 Inactive
@VitaliiMaltsev
Copy link
Contributor Author

VitaliiMaltsev commented Oct 22, 2021

/publish connector=connectors/source-redshift

🕑 connectors/source-redshift https://github.com/airbytehq/airbyte/actions/runs/1371283187
✅ connectors/source-redshift https://github.com/airbytehq/airbyte/actions/runs/1371283187

@VitaliiMaltsev
Copy link
Contributor Author

VitaliiMaltsev commented Oct 22, 2021

/publish connector=connectors/destination-redshift

🕑 connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371284586
❌ connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371284586

@VitaliiMaltsev VitaliiMaltsev temporarily deployed to more-secrets October 22, 2021 07:59 Inactive
@jrhizor jrhizor temporarily deployed to more-secrets October 22, 2021 08:01 Inactive
@jrhizor jrhizor temporarily deployed to more-secrets October 22, 2021 08:01 Inactive
@VitaliiMaltsev VitaliiMaltsev temporarily deployed to more-secrets October 22, 2021 08:45 Inactive
@VitaliiMaltsev
Copy link
Contributor Author

VitaliiMaltsev commented Oct 22, 2021

/publish connector=connectors/destination-redshift

🕑 connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371442011
✅ connectors/destination-redshift https://github.com/airbytehq/airbyte/actions/runs/1371442011

@jrhizor jrhizor temporarily deployed to more-secrets October 22, 2021 08:48 Inactive
@VitaliiMaltsev VitaliiMaltsev merged commit 0c93274 into master Oct 22, 2021
@VitaliiMaltsev VitaliiMaltsev deleted the vmaltsev/redshift-ssl-only branch October 22, 2021 09:28
schlattk pushed a commit to schlattk/airbyte that referenced this pull request Jan 4, 2022
…q#7234)

* Redshift Source and Restination set SSL as default option

* add changelog

* remove SSL test| add more documentation

* bump new version

* bump new version

Co-authored-by: vmaltsev <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/connectors Connector related issues area/documentation Improvements or additions to documentation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Redshift Destination: create secure-only version Redshift Source: create secure-only version
5 participants