This is an automated email from the ASF dual-hosted git repository. nic-6443 pushed a commit to branch feat/central-secret-refs in repository https://gitbox.apache.org/repos/asf/apisix.git
commit 2b52d3a30e2de4466797ad68431ba26d0c403f11 Author: Nic <[email protected]> AuthorDate: Tue Apr 28 18:00:51 2026 +0800 docs: clarify that resolved secret values are not re-validated --- docs/en/latest/terminology/secret.md | 2 +- docs/zh/latest/terminology/secret.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/latest/terminology/secret.md b/docs/en/latest/terminology/secret.md index 6a1a8def1..cd6180149 100644 --- a/docs/en/latest/terminology/secret.md +++ b/docs/en/latest/terminology/secret.md @@ -46,7 +46,7 @@ You can use APISIX Secret functions by specifying format variables in the plugin :::tip -When a plugin configuration field uses a secret reference like `$secret://...` or `$env://...`, schema validation constraints (such as `enum`, `pattern`, `minLength`, `maxLength`) on that field are automatically bypassed during configuration loading. The actual resolved value is validated at runtime. +When a plugin configuration field uses a secret reference like `$secret://...` or `$env://...`, schema validation constraints (such as `enum`, `pattern`, `minLength`, `maxLength`) on that field are automatically bypassed during configuration loading. The resolved value is used directly at runtime without re-validation against the schema — ensure your secret values are valid for the target field. ::: diff --git a/docs/zh/latest/terminology/secret.md b/docs/zh/latest/terminology/secret.md index 64c3760ec..24608a104 100644 --- a/docs/zh/latest/terminology/secret.md +++ b/docs/zh/latest/terminology/secret.md @@ -46,7 +46,7 @@ APISIX 目前支持通过以下方式存储密钥： :::tip -当插件配置字段使用了 `$secret://...` 或 `$env://...` 格式的密钥引用时，该字段上的 schema 校验约束（如 `enum`、`pattern`、`minLength`、`maxLength`）会在配置加载时自动跳过。实际解析后的值会在运行时进行校验。 +当插件配置字段使用了 `$secret://...` 或 `$env://...` 格式的密钥引用时，该字段上的 schema 校验约束（如 `enum`、`pattern`、`minLength`、`maxLength`）会在配置加载时自动跳过。解析后的值在运行时直接使用，不会再次进行 schema 校验——请确保密钥的实际值对目标字段有效。 :::
