Skip to content

feat: use secrets in submit with arguments dialog#1767

Merged
maxy-shpfy merged 1 commit intomasterfrom
02-06-feat_use_secrets_in_submit_with_arguments_dialog
Feb 19, 2026
Merged

feat: use secrets in submit with arguments dialog#1767
maxy-shpfy merged 1 commit intomasterfrom
02-06-feat_use_secrets_in_submit_with_arguments_dialog

Conversation

@maxy-shpfy
Copy link
Copy Markdown
Collaborator

@maxy-shpfy maxy-shpfy commented Feb 6, 2026

Description

Added support for SecretArguments in pipeline rerun functionality. This enhancement allows users to securely pass secret values when rerunning pipelines by integrating with the existing secrets management system. The implementation includes UI components for selecting secrets and proper handling of secret arguments throughout the pipeline submission process.

Type of Change

  • New feature
  • Improvement

Checklist

  • I have tested this does not break current pipelines / runs functionality
  • I have tested the changes on staging

Screenshots

Screen Recording 2026-02-17 at 4.51.13 PM.mov (uploaded via Graphite)

Test Instructions

  1. Enable the "secrets" feature flag
  2. Create a pipeline with parameters
  3. Run the pipeline
  4. Attempt to rerun the pipeline
  5. Verify that you can select secrets for parameters
  6. Confirm that the pipeline runs successfully with the secret values

Additional Comments

This change properly handles SecretArgument types in the pipeline rerun flow, fixing type issues with the API and ensuring secrets are preserved during resubmission. The UI now shows a lock icon for secret values and provides an option to select secrets for parameters.

@maxy-shpfy maxy-shpfy mentioned this pull request Feb 6, 2026
4 tasks
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from f8de3f0 to ff72e68 Compare February 9, 2026 20:54
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from c717675 to b341078 Compare February 9, 2026 20:55
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from ff72e68 to 76e1ba3 Compare February 9, 2026 21:03
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch 2 times, most recently from a6f7d6e to dea5ac6 Compare February 9, 2026 21:07
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch 2 times, most recently from ffe4c37 to 8de520a Compare February 9, 2026 21:28
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from dea5ac6 to 8834c6c Compare February 9, 2026 21:28
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from 8de520a to a166e29 Compare February 9, 2026 21:32
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch 2 times, most recently from 764e981 to bf0f4c9 Compare February 9, 2026 22:03
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from a166e29 to 211cc35 Compare February 9, 2026 22:03
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from 211cc35 to fd03b48 Compare February 18, 2026 01:30
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from bf0f4c9 to 07cdf48 Compare February 18, 2026 01:30
@maxy-shpfy maxy-shpfy marked this pull request as ready for review February 18, 2026 01:32
@maxy-shpfy maxy-shpfy requested a review from a team as a code owner February 18, 2026 01:32
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from fd03b48 to b89e896 Compare February 18, 2026 19:11
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from 07cdf48 to 76e0840 Compare February 18, 2026 19:11
),
),
taskArguments: executionData?.rootDetails?.task_spec.arguments,
// The generated API types don't include SecretArgument but the backend supports it
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we re-generate the types? npm run generate-api I believe

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah, that's done in a later PRs - this was created before backend was ready.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

But in general it is a broader problem that we have two sets of types to describe the same thing - ComponentSpec one from generated api, one manually written

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agree with this ^ Wish we had a singular automatic solution for a type interface when dealing with the api/backend

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can set this as agenda item for Frontend Sync

@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from 76e0840 to 95d86dc Compare February 18, 2026 19:36
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch 2 times, most recently from 27f3a22 to cd0cdde Compare February 18, 2026 19:46
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from 95d86dc to 23a6f7b Compare February 18, 2026 19:46
Copy link
Copy Markdown
Collaborator

And second question: any reason to implement the ability to set a secret argument for an input node on the node itself and not just at runtime?

image.png

(i.e. same as secrets for task arguments, but for input nodes instead)

@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch 2 times, most recently from ce8e281 to e4936a3 Compare February 18, 2026 20:27
Copy link
Copy Markdown
Collaborator Author

@camielvs
> any reason to implement the ability to set a secret argument for an input node on the node itself and not just at runtime?

Yes, Secret can be set only for Argument. And Arguments in our case are applicable only when submitting the ComponentSpec as a TaskSpec. So there is no way to set Secret directly onto the input - it simply is not supported by the spec and backend.

Copy link
Copy Markdown
Collaborator Author

@camielvs
> How will it work with the "copy from recent runs" feature?

It will not be copied. So at this moment secrets need to be set manually each time. I will explore this in a follow up PR

Copy link
Copy Markdown
Collaborator

camielvs commented Feb 18, 2026

it simply is not supported by the spec

How are task arguments achieving this in a way that would be different to input nodes? I wouldn't be surprised if this is something users ask for. Maybe it would be mitigated if we make "Submit run with arguments" the default behaviour for the submit button.

It will not be copied. So at this moment secrets need to be set manually each time. I will explore this in a follow up PR

That's fine. I tried this in #1771 and nothing happened except a "success" toast appearing. I would recommend removing the toast if nothing actually gets updated.
image.png

Copy link
Copy Markdown
Collaborator Author

>I would recommend removing the toast if nothing actually gets updated.
I was thinking about this, but since it's hard to catch by eye if smth was actually updated from the values standpoint, I decided to keep toast as an action feedback - so user knows action was successful even without visible result (e.g. values are the same)

Copy link
Copy Markdown
Collaborator

Maybe a different message/colour will suffice? e.g. "No arguments to copy" or something like that.

@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from e4936a3 to b23b20e Compare February 18, 2026 20:59
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from 0ea1669 to dd2207d Compare February 18, 2026 21:02
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from b23b20e to aa2a04f Compare February 18, 2026 21:02
Copy link
Copy Markdown
Collaborator Author

>Maybe a different message/colour will suffice? e.g. "No arguments to copy" or something like that.
I can take that into separate PR - since it is not in scope of current one.

@maxy-shpfy maxy-shpfy requested a review from camielvs February 18, 2026 21:11
Copy link
Copy Markdown
Collaborator

@camielvs camielvs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch from dd2207d to a213ecb Compare February 19, 2026 01:56
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch 2 times, most recently from 6addd92 to a6041e7 Compare February 19, 2026 02:50
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor branch 2 times, most recently from 6918412 to 963e0c9 Compare February 19, 2026 02:53
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from a6041e7 to 5e51121 Compare February 19, 2026 02:53
@maxy-shpfy maxy-shpfy changed the base branch from 02-06-feat_use_secrets_in_canvas_tasks_and_arguments_editor to graphite-base/1767 February 19, 2026 03:10
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from 5e51121 to b7596cf Compare February 19, 2026 03:10
@graphite-app graphite-app Bot changed the base branch from graphite-base/1767 to master February 19, 2026 03:10
@maxy-shpfy maxy-shpfy force-pushed the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch from b7596cf to 50a917d Compare February 19, 2026 03:10
Copy link
Copy Markdown
Collaborator Author

maxy-shpfy commented Feb 19, 2026

Merge activity

  • Feb 19, 3:37 AM UTC: A user started a stack merge that includes this pull request via Graphite.
  • Feb 19, 3:37 AM UTC: @maxy-shpfy merged this pull request with Graphite.

@maxy-shpfy maxy-shpfy merged commit 7ff1871 into master Feb 19, 2026
7 of 8 checks passed
@maxy-shpfy maxy-shpfy deleted the 02-06-feat_use_secrets_in_submit_with_arguments_dialog branch February 19, 2026 03:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants