Introduction
This recipe can be used to populate a buildout part with variables whose values come from external commands.
Fetch your secrets from the environment when possible, not from managed source code. In our example below, we move them to LastPass, write them to an unmanaged file during the buildout, and read them from the environment during execution.
You can use this approach in order to keep credentials and other sensitive secrets out of the repository.
A short example:
[sekrets] recipe = sixfeetup.recipe.runvars username = somedewd password = `lpass show --password somedewd@some.api.com`
Now you are free to use ${sekrets:username} and ${sekrets:password} in other parts or templates as part of your buildout.
This is useful for populating environment variables as part of system configuration, for example.
Metadata
Release files for sixfeetup.recipe.runvars 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| sixfeetup.recipe.runvars-0.2.0.tar.gz | 3.2 kB | Details |
Release files / sixfeetup.recipe.runvars-0.2.0.tar.gz
| Download URL | sixfeetup.recipe.runvars-0.2.0.tar.gz |
|---|---|
| Size | 3.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
197670f7c37646444360e9859a0cd98d74ca196cc41496e45446300575e79516
|
|
BLAKE2b-256 checksum How to use checksums |
db1d4c6f550a35eba894efbddc31b145ea30da11cab4c369480cb1e9cebdc5b4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |