Why is part of my logs being unexpectedly redacted or masked?

If you're seeing unexpected redaction or masking in your stack outputs, this is likely because you have a variable saved as a secret that matches the value being redacted.

Common Cause

The most common scenario is when you have accidentally saved a simple value (like a space character, common string, or other basic value) as a secret variable. When Spacelift's secret masking feature runs, it will redact any output that matches your secret values, even if the match is unintentional.

How to Resolve

1. Review your stack's environment variables and context variables

2. Look for any variables marked as "secret" that might contain simple or common values

3. Check if any of these secret values match what's being redacted in your output

4. If you find a match, either:

   • Remove the variable if it's not needed

   • Change it from a secret to a regular variable if the value doesn't need to be protected

   • Update the value to something more specific if it needs to remain a secret

Note that disabling secret masking entirely is not recommended as it's an important security feature. Instead, focus on identifying and correcting the problematic secret variable.