A6AN opened a new pull request, #58539: URL: https://github.com/apache/airflow/pull/58539
What This PR clarifies that masking for Connection extra JSON fields is keyword-dependent and not applied to every field in the extra JSON. It adds the default sensitive keywords, a short example table showing masking scope, and local preview instructions for maintainers. Why The current wording implies all keys in the extra JSON are masked. Issue #58514 demonstrated that only keys containing certain sensitive keywords are redacted. This PR updates the documentation to reflect runtime behavior accurately. Changes Replaces the ambiguous paragraph in airflow-core/docs/security/secrets/mask-sensitive-values.rst Adds the list of default sensitive keywords Adds a table of examples showing masking behavior Adds a short note + preview instructions References Fixes: #58514 I previewed the docs locally / in-editor and confirm the new section renders as expected. Happy to adjust phrasing or formatting per maintainers' feedback. Ayan -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
