Hide sensitive values from airflow connections list #60060
+51
−1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
RafiB982
force-pushed
the
hide-sensitive-values-connections-list
branch
from
58d855c to
bb0f174
Compare
1 task
RafiB982
force-pushed
the
hide-sensitive-values-connections-list
branch
from
bb0f174 to
4e24c17
Compare
RafiB982
force-pushed
the
hide-sensitive-values-connections-list
branch
from
4e24c17 to
9fdee52
Compare
potiuk
requested changes
Jan 4, 2026
Member
potiuk
left a comment
potiuk
left a comment
There was a problem hiding this comment.
This one needs more changes. We want to make quite a bit more here to make behaviour consistent with other commands:
- list should only return ids, nothing else
- there should be
--show-valuesthat should show all values (including sensitive) - there should be
--hide-sensitiveflag additionally to--show-valuesto hide sensitive information
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR updates
airflow connections listto no longer display sensitiveconnection values (such as login, password, or credential-containing URIs)
by default.
The change only affects the list command. The
airflow connections getcommand remains unchanged, as it is explicitly intended for retrieving full
connection details.
A unit test is added to prevent regressions, and a newsfragment documents
the user-facing behavior change.
Fixes #59844