[GitHub] [airflow] dstandish commented on a change in pull request #6376: [AIRFLOW-5705] Add secrets backend and support for AWS SSM

[GitBox <gi...@apache.org>]

dstandish commented on a change in pull request #6376: [AIRFLOW-5705] Add secrets backend and support for AWS SSM
URL: https://github.com/apache/airflow/pull/6376#discussion_r389482837
 
 

 ##########
 File path: airflow/config_templates/default_airflow.cfg
 ##########
 @@ -248,6 +248,16 @@ dag_processor_manager_log_location = {AIRFLOW_HOME}/logs/dag_processor_manager/d
 # Default to use task handler.
 task_log_reader = task
 
+[creds_backend]
+# List of creds backend classes to use in order of desired search path
+class_list = airflow.creds.environment_variables.EnvironmentVariablesCredsBackend, airflow.creds.metastore.MetastoreCredsBackend
+
+# Use when using AWS SSM / airflow.providers.amazon.aws.creds.ssm.AwsSsmCredsBackend as creds provider
+# If prefix is ``/airflow``, then example param path is ``/airflow/AIRFLOW_CONN_SMTP_DEFAULT``
+# Use same URI format as you would with env vars, or ``conn_uri`` CLI param.
+aws_ssm_prefix = /airflow
+aws_ssm_profile_name =
 
 Review comment:
   update: i have renamed creds --> secrets
   
   i think we have general consensus that secrets is a better name
   
   the other idea about config structure (and removing configurability of search path), i am going to continue to let that percolate a little bit to see if there are any other opinions about it.  i have also updated the AIP to reflect the new provisional name

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services