python-kv-dotenv 0.1.0

Load .env files and resolve Azure Key Vault secret URLs.

python-kv-dotenv

python-kv-dotenv is a small wrapper around python-dotenv that resolves Azure Key Vault secret references while loading .env files.

It keeps python-dotenv file discovery and variable interpolation behavior, and adds support for wrapped Key Vault URLs in env values.

Install

pip install python-kv-dotenv

Supported kv: format

kv:https://<vault>.vault.azure.net/secrets/<secret-name>
kv:https://<vault>.vault.azure.net/secrets/<secret-name>/<secret-version>

Example

.env

MAXIMO_CONNSTRING=kv:https://example.vault.azure.net/secrets/maximo-prod-connstring
ENV=dev

Python:

import os

from python_kv_dotenv import load_kv_dotenv

load_kv_dotenv()

print(os.environ["ENV"])
print("MAXIMO_CONNSTRING" in os.environ)

Authentication

Secret resolution uses azure.identity.DefaultAzureCredential by default.

You can also pass a custom Azure credential:

from azure.identity import DefaultAzureCredential

from python_kv_dotenv import load_kv_dotenv

load_kv_dotenv(credential=DefaultAzureCredential())

Notes

• Non-kv: values are loaded like normal python-dotenv values.
• kv: references are resolved before later ${VAR} interpolation uses them.
• Secret lookup failures are fail-fast and raise the underlying Azure error.