Skip to content

Remove config access for sensitive data from API /UI #59842

@potiuk

Description

@potiuk

Body

Config sensitive data should not never be exposed via the Public API / UI (it should be always masked).

Some pointers:

  • exposing of config will be "false" by default for commands like: airflow config list

-It will be exposed only if a flag is provided to it. We could use a flag like: --show-values to expose it. The flag will only accept "false" and "non-sensitive-only". The "true" will be rejected.

Committer

  • I acknowledge that I am a maintainer/committer of the Apache Airflow project.

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions