diff options
| author | GitLab Bot <gitlab-bot@gitlab.com> | 2021-07-02 21:08:28 +0300 |
|---|---|---|
| committer | GitLab Bot <gitlab-bot@gitlab.com> | 2021-07-02 21:08:28 +0300 |
| commit | 888bb81daaf346356c1fdd84a60108417fe2e774 (patch) | |
| tree | 72c8ebcd8362185afdc91ed1c16b5f300b2fdc7b /doc/ci/secrets/index.md | |
| parent | e61f798b74e8e18fca7239fd01802182479bfcfc (diff) | |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/ci/secrets/index.md')
| -rw-r--r-- | doc/ci/secrets/index.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/doc/ci/secrets/index.md b/doc/ci/secrets/index.md index 6145a953571..7fbc3448d4e 100644 --- a/doc/ci/secrets/index.md +++ b/doc/ci/secrets/index.md @@ -8,6 +8,7 @@ type: concepts, howto # Using external secrets in CI > - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/218746) in GitLab 13.4 and GitLab Runner 13.4. +> - `file` setting [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/250695) in GitLab 14.1 and GitLab Runner 14.1. Secrets represent sensitive information your CI job needs to complete work. This sensitive information can be items like API tokens, database credentials, or private keys. @@ -116,6 +117,18 @@ After GitLab fetches the secret from Vault, the value is saved in a temporary fi The path to this file is stored in a CI/CD variable named `DATABASE_PASSWORD`, similar to [variables of type `file`](../variables/index.md#cicd-variable-types). +To overwrite the default behavior, set the `file` option explicitly: + +```yaml +secrets: + DATABASE_PASSWORD: + vault: production/db/password@ops + file: false +``` + +In this example, the secret value is put directly in the `DATABASE_PASSWORD` variable +instead of pointing to a file that holds it. + For more information about the supported syntax, read the [`.gitlab-ci.yml` reference](../yaml/index.md#secretsvault). |