what s the currently recommended way of handling secrets in

Question

what s the currently recommended way of handling secrets in YAML config

schrockn · Answer

We don t really have special support for secrets atm If dagster weren t in play how would you be managing them e g are you using a service to do so Vault or similar

dwall · Answer

git crypt

dwall · Answer

just curious if there was something else in the works I remember a while back there was some chatter about a special config for secrets

schrockn · Answer

we experimented with an is secret flag on fields in config the intended feature would be to hide it within the config editor in dagit however that feature wasn t implemented and was delayed and so we ripped out is secret

schrockn · Answer

that would be compatible with git crypt if my cursory reading of the feature is accurate

dwall · Answer

yep sounds it

schrockn · Answer

what secrets support would you want expect

dwall · Answer

really just obfuscation in the UI

schrockn · Answer

got it

max · Answer

and i think obfuscation in graphql queries

schrockn · Answer

< dwall> feel free to weigh in