Hi! Is it possible to use login/passwords for ingestion sources like DBs from some specific vault? Simply saying store credentials in external vault.

DataHub has it's own secret mechanism, which you can configure through the UI. If you're using a kubernetes deployment, you may also be able to mount secrets from other secret providers as environment variables, but it's an advanced setup that we don't have docs for.

Hi! @gray-shoe-75895 Thank you very much for response. If you can give some hints on Kubernetes deployment, that would be great!

You'll need to mount environment variables to the datahub-actions pod. Beyond that, it's going to depend on your k8s setup so I can't really help with that.

Got it! @gray-shoe-75895 Can you please suggest which env vars I need to define? May be be you can navigate to Datahub code where env vars listed. Thank you!

There's no hardcoded set of env variables - you just reference env variable names in your recipe https://datahubproject.io/docs/metadata-ingestion/recipe_overview/#handling-sensitive-information-in-recipes