Uh oh!
There was an error while loading. Please reload this page.
Document that Dag bundle kwargs should reference a Connection, not inline credentials - #68373
Merged
vatsrahul1001 merged 2 commits intoJun 28, 2026
Conversation
…line credentials Generated-by: Claude Opus 4.8 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions
potiukforce-pushed
the
docs-dag-bundle-kwargs-reference-connections
branch
from
June 14, 2026 01:51
fa4a96f to
cb24ac7CompareGenerated-by: Claude Opus 4.8 (1M context)
potiuk
commented
Jun 17, 2026
MemberAuthor
I gues we can still merge this one before beta @vatsrahul1001 ? |
potiuk
commented
Jun 21, 2026
MemberAuthor
Small doc update @vatsrahul1001 -> just enough to clarify potential user misconfiguration of kwargs for passing credentials. |
vatsrahul1001
approved these changes
Jun 28, 2026
Uh oh!
There was an error while loading. Please reload this page.
Contributor
Backport successfully created: v3-3-testNote: As of Merging PRs targeted for Airflow 3.X In matter of doubt please ask in #release-management Slack channel.
|
github-actionsBot
pushed a commit
to aws-mwaa/upstream-to-airflow
that referenced
this pull request
Jun 28, 2026
…tion, not inline credentials (apache#68373) * Document that Dag bundle kwargs should reference a Connection, not inline credentials Generated-by: Claude Opus 4.8 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Fix docs spelling: reword 'inlined' (sphinx spellcheck) (cherry picked from commit 8c74f8e) Co-authored-by: Jarek Potiuk <jarek@potiuk.com> Generated-by: Claude Opus 4.8 (1M context)
aws-airflow-bot pushed a commit
to aws-mwaa/upstream-to-airflow
that referenced
this pull request
Jun 28, 2026
…tion, not inline credentials (apache#68373) * Document that Dag bundle kwargs should reference a Connection, not inline credentials Generated-by: Claude Opus 4.8 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Fix docs spelling: reword 'inlined' (sphinx spellcheck) (cherry picked from commit 8c74f8e) Co-authored-by: Jarek Potiuk <jarek@potiuk.com> Generated-by: Claude Opus 4.8 (1M context)
vatsrahul1001 pushed a commit
that referenced
this pull request
Jun 28, 2026
…tion, not inline credentials (#68373) (#69105) * Document that Dag bundle kwargs should reference a Connection, not inline credentials Generated-by: Claude Opus 4.8 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Fix docs spelling: reword 'inlined' (sphinx spellcheck) (cherry picked from commit 8c74f8e) Generated-by: Claude Opus 4.8 (1M context) Co-authored-by: Jarek Potiuk <jarek@potiuk.com>
karenbraganz pushed a commit
to karenbraganz/airflow
that referenced
this pull request
Jun 30, 2026
…line credentials (apache#68373) * Document that Dag bundle kwargs should reference a Connection, not inline credentials Generated-by: Claude Opus 4.8 (1M context) following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Fix docs spelling: reword 'inlined' (sphinx spellcheck) Generated-by: Claude Opus 4.8 (1M context)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds guidance to the Dag bundles documentation that credentials for a Dag bundle should be supplied through an Airflow Connection (
git_conn_id/aws_conn_id/gcp_conn_id) rather than inlined into the bundlekwargs.dag_bundle_config_listis surfaced by the Config API when[api] expose_configis enabled, so a credential placed directly in a bundle'skwargs(for example a token embedded inrepo_url) is readable by anyone authorized to read the configuration. Referencing a Connection keeps the credential in the secrets backend and out of the exposed configuration.Docs-only change.
Was generative AI tooling used to co-author this PR?
Generated-by: Claude Opus 4.8 (1M context) following the guidelines at
https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions