ashb commented on issue #54540: URL: https://github.com/apache/airflow/issues/54540#issuecomment-3192087365
Okay I think I know what is going on. The calls to `mask_secret`, either directly in the dag, or when the connection is loaded from a secrets backend are happening in the task process. This means that the values to mask are being added to that process. However the processing of logs and the masking is being done in the parent process. And when the connection is loaded a secrets backend (which includes env vars!) the mask doesn't go to the right place. However if the connection is loaded from the Airflow metadata (which happens via the API server) it is correctly masked: <img width="1412" height="316" alt="Image" src="https://github.com/user-attachments/assets/5d1f6365-f85f-440c-a348-0a518b088666"; /> L11 and L12 in this screenshot specifically -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
