[I] Support AES256-encrypted values for sensitive parameters in configs, env variables etc. [airflow]

["andrii-korotkov-verkada (via GitHub)" <gi...@apache.org>]

andrii-korotkov-verkada opened a new issue, #45194:
URL: https://github.com/apache/airflow/issues/45194

   ### Description
   
   Support config values like `fernet_key_encrypted`, env variables like `AIRFLOW__CORE__FERNET_KEY_ENCRYPTED` etc. AES256 is chosen since it's [supported by Helm templates](https://helm.sh/docs/chart_template_guide/function_list/#encryptaes) and is quite generic.
   
   ### Use case/motivation
   
   The goal is to better support deploying manifests with ArgoCD or similar, where the manifests are stored in Git and thus can't contain secret values due to security reasons. Encrypted values can be stored though, so only the encryption key itself would have to be fetched from a secret, significantly reducing the operational overhead.
   
   ### Related issues
   
   https://github.com/apache/airflow/issues/45171
   
   ### Are you willing to submit a PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Support AES256-encrypted values for sensitive parameters in configs, env variables etc. [airflow]

["andrii-korotkov-verkada (via GitHub)" <gi...@apache.org>]

andrii-korotkov-verkada closed issue #45194: Support AES256-encrypted values for sensitive parameters in configs, env variables etc.
URL: https://github.com/apache/airflow/issues/45194


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Support AES256-encrypted values for sensitive parameters in configs, env variables etc. [airflow]

["andrii-korotkov-verkada (via GitHub)" <gi...@apache.org>]

andrii-korotkov-verkada commented on issue #45194:
URL: https://github.com/apache/airflow/issues/45194#issuecomment-2563025613

   After more discussion in https://github.com/apache/airflow/pull/45195, this seems not worth it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org