Hello I have a basic question about the python cli ingestion - the passwords in the recipe.yml file - can they be hidden or can it be connected to a vault - so the passwords are not cleartext there?

The recipe files support env variables. So you can use

${FOO_CREDENTIAL}

as the placeholder in the recipe file to indicate an env variable needed.

Thanks for the tip