Hello 😄 I’m doing research on how to secure airbyte and use octavia cli I found we can use gcp secret menager to store secrets reference here:

<https://docs.airbyte.com/operator-guides/configuring-airbyte/#secrets>
SECRET_STORE_GCP_PROJECT_ID - Defines the GCP Project to store secrets in. Alpha support.
SECRET_STORE_GCP_CREDENTIALS - Define the JSON credentials used to read/write Airbyte Configuration to Google Secret Manager. These credentials must have Secret Manager Read/Write access. Alpha support.

And here is my question is possible to use octavia with this secret menager: The possible workflow I create the source where I put env vars ${SECRET} and rather than using env variables stores inside .octavia we will use secret manager that is inside aribyte? Thanks a lot for your response!!

Hey @Piotr Sierkin this is not an existing feature but would be a useful one. Do you mind filing a feature request so we keep track of this and work on it eventually?

Workaround with this would be to create deployment with octavia in k8s and mount env variables and somehow comunicate with octavia from remote location / or through ssh tunnel nevertheless I will create feature request and try to research more how to connect the dots 😄

The easiest workaround would be to have a script pulling your GSM secrets to your environment variables 😄