[GitHub] [airflow] potiuk commented on a diff in pull request #28239: Add a new config for adapting masked secrets to make it easier to prevent secret leakage in logs

[GitBox <gi...@apache.org>]

potiuk commented on code in PR #28239:
URL: https://github.com/apache/airflow/pull/28239#discussion_r1043841553


##########
airflow/config_templates/config.yml:
##########
@@ -713,6 +713,17 @@
       type: string
       example: ~
       default: "airflow.utils.log.timezone_aware.TimezoneAware"
+    - name: secret_mask_adapter
+      description: |
+        An import path to a function to add adaptations of each secret added with
+        `airflow.utils.log.secrets_masker.mask_secret` to the log message. The given function
+        is expected to require a single parameter: the secret to be adapted. It may return a
+        single adaptation of the secret or an iterable of adaptations to each be masked as secrets.
+        The original secret will be masked as well as any adaptations returned.
+      version_added: 2.5.0

Review Comment:
   ```suggestion
         version_added: 2.6.0
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org