is there anyway to pass a secret into an environme...
# ask-communityz
Zach Schumacher
05/20/2021, 7:08 PMis there anyway to pass a secret into an environment variable in prefect cloud? e.g. I know i can set env variables using a template or via the KubernetesRun object, but both approaches get displayed in plain text in the UI
k
Kevin Kho
05/20/2021, 7:13 PM
Hey @Zach Schumacher you mean the secret is stored on Prefect Cloud and you’re pulling it to set an environment variable?
z
Zach Schumacher
05/20/2021, 7:13 PMyeah thats exactly right
k
Kevin Kho
05/20/2021, 7:14 PM
And you are you setting that environment variable?
os.environz
Zach Schumacher
05/20/2021, 7:15 PM Copy code
- name: AWS_ACCESS_KEY_ID
value: {Secret("PROD__AWS_ACCESS_KEY_ID").get()}
- name: AWS_SECRET_ACCESS_KEY
value: {Secret("PROD__AWS_SECRET_ACCESS_KEY").get()}Zach Schumacher
05/20/2021, 7:16 PMsetting it in my template like this, but kind of just feels like im doing something wrong
Zach Schumacher
05/20/2021, 7:16 PMi actually did read that i can just set the aws key/secret as a dict and prefect handles those for me, but i have other env vars that need set from secrets as well
k
Kevin Kho
05/20/2021, 7:18 PM
Kevin Kho
05/20/2021, 7:19 PM
Ignore last message. That’s not relevant. Ok I’ll ask the team about this
z
Zach Schumacher
05/20/2021, 7:20 PMZach Schumacher
05/20/2021, 7:20 PMbut just wanted to check if i was missing something
Zach Schumacher
05/20/2021, 7:22 PMactually jk, that wouldn’t work in k8s world
k
Kevin Kho
05/20/2021, 7:31 PM
The team advice is that k8s secrets probably serve you better in this case unfortunately
z
Zach Schumacher
05/20/2021, 7:32 PMyeah fair enough