Secrets management

To manage credentials securely, use a secret store. Our system currently supports Azure Key Vault.

The general workflow is as follows:

1. Create a system-level source that connects to your secret store, as described in System-level sources.
2. Create an environment, as described in Environments, and add variables that retrieve secrets from the secret store using template literals.
3. Import the environment into your application.
4. Use the environment variables as template literals in the properties of your application sources.

For example, to retrieve credentials from Azure Key Vault, follow these steps:

1. Create a system-level source named AzureKV, as described in System-level sources.
2. Create an environment named envWithTemplateLiteral, as described in Environments.
3. In the newly created environment, add a variable named padb.dev.sqlserver.password with the value $[AzureKV]{dev-sqlserver-password}. Here, dev-sqlserver-password is the name of a secret stored in Azure Key Vault.
4. Open an application and import the environment. In the header, click Environments, then Edit, and add the newly created environment.
5. Go to Sources in the application navigation tree. You can now enter ${padb.dev.sqlserver.password} as the value of any source property of any source.