Skip to content

Conversation

@Subham-KRLX
Copy link
Contributor

Description

Added integration tests to verify sensitive config values are properly masked end-to-end when using airflowctl with actual Airflow API.

The Airflow API masks sensitive values (like fernet_key, sql_alchemy_conn) as < hidden >. These integration tests confirm that airflowctl correctly preserves and displays those masked values in real scenarios.

Changes

  • Added test_config_sensitive_masking.py to airflow-ctl-tests
  • 3 integration test cases covering:
    • config list command
    • config get for fernet_key
    • config get for sql_alchemy_conn
  • Tests run against actual docker-compose Airflow environment
  • Verifies < hidden > appears in output for sensitive configs

Related PRs

Related Issue

Closes #59843

Testing

# Run from airflow-ctl-tests directory
pytest tests/airflowctl_tests/test_config_sensitive_masking.py -v

@potiuk
Copy link
Member

potiuk commented Jan 27, 2026

Some static checks fail

@Subham-KRLX
Copy link
Contributor Author

@potiuk Thanks for pointing that out. I have fixed the static check failures (import sorting) and verified everything locally with pre-commit. The changes are pushed and CI should pass now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove config sensitive data from airflowctl

2 participants