This is an automated email from the ASF dual-hosted git repository.
o-nikolas pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new a15ef5081d9 Make Redshift system-test clusters non-public in
sql_to_s3/s3_to_sql (#70705)
a15ef5081d9 is described below
commit a15ef5081d93700f02d32c5be3c4ebed45fd55e3
Author: Niko Oliveira <[email protected]>
AuthorDate: Wed Jul 29 17:14:50 2026 -0700
Make Redshift system-test clusters non-public in sql_to_s3/s3_to_sql
(#70705)
RedshiftCreateClusterOperator defaults publicly_accessible=True, so the
example_sql_to_s3 and example_s3_to_sql system tests create Redshift
clusters with public endpoints, triggering security issues with
publicly accessible databases.
The AWS system test harness has been updated to support private routing
to the redshift databases.
---
providers/amazon/tests/system/amazon/aws/example_s3_to_sql.py | 1 +
providers/amazon/tests/system/amazon/aws/example_sql_to_s3.py | 1 +
2 files changed, 2 insertions(+)
diff --git a/providers/amazon/tests/system/amazon/aws/example_s3_to_sql.py
b/providers/amazon/tests/system/amazon/aws/example_s3_to_sql.py
index e53c5657e02..df15e1ba0fd 100644
--- a/providers/amazon/tests/system/amazon/aws/example_s3_to_sql.py
+++ b/providers/amazon/tests/system/amazon/aws/example_s3_to_sql.py
@@ -115,6 +115,7 @@ with DAG(
cluster_identifier=redshift_cluster_identifier,
vpc_security_group_ids=[security_group_id],
cluster_subnet_group_name=cluster_subnet_group_name,
+ publicly_accessible=False,
cluster_type="single-node",
node_type="ra3.large",
master_username=DB_LOGIN,
diff --git a/providers/amazon/tests/system/amazon/aws/example_sql_to_s3.py
b/providers/amazon/tests/system/amazon/aws/example_sql_to_s3.py
index 657f36be007..cffda6c3ba0 100644
--- a/providers/amazon/tests/system/amazon/aws/example_sql_to_s3.py
+++ b/providers/amazon/tests/system/amazon/aws/example_sql_to_s3.py
@@ -122,6 +122,7 @@ with DAG(
cluster_identifier=redshift_cluster_identifier,
vpc_security_group_ids=[security_group_id],
cluster_subnet_group_name=cluster_subnet_group_name,
+ publicly_accessible=False,
cluster_type="single-node",
node_type="ra3.large",
master_username=DB_LOGIN,
