{"action":"created","issue":{"url":"https://api.github.com/repos/mesosphere/marathon/issues/2295","labels_url":"https://api.github.com/repos/mesosphere/marathon/issues/2295/labels{/name}","comments_url":"https://api.github.com/repos/mesosphere/marathon/issues/2295/comments","events_url":"https://api.github.com/repos/mesosphere/marathon/issues/2295/events","html_url":"https://github.com/mesosphere/marathon/issues/2295","id":107684893,"number":2295,"title":"Support for \"secretEnv\"","user":{"login":"eirslett","id":1872593,"avatar_url":"https://avatars.githubusercontent.com/u/1872593?v=3","gravatar_id":"","url":"https://api.github.com/users/eirslett","html_url":"https://github.com/eirslett","followers_url":"https://api.github.com/users/eirslett/followers","following_url":"https://api.github.com/users/eirslett/following{/other_user}","gists_url":"https://api.github.com/users/eirslett/gists{/gist_id}","starred_url":"https://api.github.com/users/eirslett/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eirslett/subscriptions","organizations_url":"https://api.github.com/users/eirslett/orgs","repos_url":"https://api.github.com/users/eirslett/repos","events_url":"https://api.github.com/users/eirslett/events{/privacy}","received_events_url":"https://api.github.com/users/eirslett/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mesosphere/marathon/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/mesosphere/marathon/labels/service","name":"service","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/mesosphere/marathon/milestones/12","html_url":"https://github.com/mesosphere/marathon/milestones/Backlog","labels_url":"https://api.github.com/repos/mesosphere/marathon/milestones/12/labels","id":870039,"number":12,"title":"Backlog","description":"","creator":{"login":"ConnorDoyle","id":379372,"avatar_url":"https://avatars.githubusercontent.com/u/379372?v=3","gravatar_id":"","url":"https://api.github.com/users/ConnorDoyle","html_url":"https://github.com/ConnorDoyle","followers_url":"https://api.github.com/users/ConnorDoyle/followers","following_url":"https://api.github.com/users/ConnorDoyle/following{/other_user}","gists_url":"https://api.github.com/users/ConnorDoyle/gists{/gist_id}","starred_url":"https://api.github.com/users/ConnorDoyle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ConnorDoyle/subscriptions","organizations_url":"https://api.github.com/users/ConnorDoyle/orgs","repos_url":"https://api.github.com/users/ConnorDoyle/repos","events_url":"https://api.github.com/users/ConnorDoyle/events{/privacy}","received_events_url":"https://api.github.com/users/ConnorDoyle/received_events","type":"User","site_admin":false},"open_issues":196,"closed_issues":11,"state":"open","created_at":"2014-11-17T19:11:38Z","updated_at":"2015-11-10T07:21:04Z","due_on":null,"closed_at":null},"comments":9,"created_at":"2015-09-22T10:19:49Z","updated_at":"2015-11-10T18:09:41Z","closed_at":null,"body":"The REST API lets you [pass environment variables](https://mesosphere.github.io/marathon/docs/rest-api.html#post-v2-apps) into the tasks you launch, but all these variables are displayed in plaintext in the Marathon UI. It would be nice to have a property \"secretEnv\" in the REST API, which would behave exactly like the \"env\" property, but the values of these variables would not be exposed in the web UI, but like \"database_password: [secret]\".\r\n\r\nIs that something that you would want to have upstream? (I could submit a patch)"},"comment":{"url":"https://api.github.com/repos/mesosphere/marathon/issues/comments/155517557","html_url":"https://github.com/mesosphere/marathon/issues/2295#issuecomment-155517557","issue_url":"https://api.github.com/repos/mesosphere/marathon/issues/2295","id":155517557,"user":{"login":"pradeepchhetri","id":2232667,"avatar_url":"https://avatars.githubusercontent.com/u/2232667?v=3","gravatar_id":"","url":"https://api.github.com/users/pradeepchhetri","html_url":"https://github.com/pradeepchhetri","followers_url":"https://api.github.com/users/pradeepchhetri/followers","following_url":"https://api.github.com/users/pradeepchhetri/following{/other_user}","gists_url":"https://api.github.com/users/pradeepchhetri/gists{/gist_id}","starred_url":"https://api.github.com/users/pradeepchhetri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pradeepchhetri/subscriptions","organizations_url":"https://api.github.com/users/pradeepchhetri/orgs","repos_url":"https://api.github.com/users/pradeepchhetri/repos","events_url":"https://api.github.com/users/pradeepchhetri/events{/privacy}","received_events_url":"https://api.github.com/users/pradeepchhetri/received_events","type":"User","site_admin":false},"created_at":"2015-11-10T18:09:41Z","updated_at":"2015-11-10T18:09:41Z","body":"@aquamatthias @kamilchm  @eirslett To keep things simple, I would like to suggest something which `CircleCI` does - showing just the last four characters of all environment variables in the marathon-ui and hide all the other characters with asterisks. This way one can verify the value of these environment variables as well and keep them hidden at the same time.\r\n\r\nThe other way, I can think of is making some standard rule like all environment variables starting with `SECRET_` shouldn't be shown in marathon-ui.\r\n\r\nLet me know what do you think.\r\n"}}