X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/55aafbb07904ca24390dd47ea960eae7cb2b909a..9b53c7be9d77f2175944e80f0daf701f32fc3e1f:/doc/user/cwl/cwl-extensions.html.textile.liquid?ds=sidebyside

diff --git a/doc/user/cwl/cwl-extensions.html.textile.liquid b/doc/user/cwl/cwl-extensions.html.textile.liquid
index 95422b6bd3..cf25639b14 100644
--- a/doc/user/cwl/cwl-extensions.html.textile.liquid
+++ b/doc/user/cwl/cwl-extensions.html.textile.liquid
@@ -26,7 +26,7 @@ hints:
   arv:RunInSingleContainer: {}
   arv:RuntimeConstraints:
     keep_cache: 123456
-    keep_output_dir: local_output_dir
+    outputDirType: keep_output_dir
   arv:PartitionRequirement:
     partition: dev_partition
   arv:APIRequirement: {}
@@ -36,6 +36,8 @@ hints:
     outputTTL: 3600
   arv:ReuseRequirement:
     enableReuse: false
+  cwltool:Secrets:
+    secrets: [input1, input2]
 </pre>
 
 The one exception to this is @arv:APIRequirement@, see note below.
@@ -101,3 +103,11 @@ Enable/disable work reuse for current process.  Default true (work reuse enabled
 table(table table-bordered table-condensed).
 |_. Field |_. Type |_. Description |
 |enableReuse|boolean|Enable/disable work reuse for current process.  Default true (work reuse enabled).|
+
+h2. cwltool:Secrets
+
+Indicate that one or more input parameters are "secret".  Must be applied at the top level Workflow.  Secret parameters are not stored in keep, are hidden from logs and API responses, and are wiped from the database after the workflow completes.
+
+table(table table-bordered table-condensed).
+|_. Field |_. Type |_. Description |
+|secrets|array<string>|Input parameters which are considered "secret".  Must be strings.|