Jmaa

Overview Repositories

30

Projects Packages Public Activity Starred Repositories

5

secret-loader (0.1.15)

Published 2024-08-08 16:22:10 +00:00 by Jmaa in Jmaa/secret_loader

Installation

To install the package using pip, run the following command:

pip install --index-url  secret-loader

For more information on the PyPI registry, see the documentation.

About this package

System for loading secrets from a variety of sources.

Secret Loader System.

System for loading secrets from a variety of sources.

Usage:

import secret_loader

secrets = secret_loader.SecretLoader(env_key_prefix='MYAPP')

db_username = secrets.load_or_fail('DATABASE_USERNAME')
db_password = secrets.load_or_fail('DATABASE_PASSWORD')

Secret loading order:

0. Hardcoded values. This is purely for debugging, prototyping, and for configuring below options.
1. Files pointed to by environment variables. Docker friendly.
2. Secrets folder. Also Docker friendly.
3. Pass: the standard unix password manager. Most suited for personal usage; very unsuited for server environments. Requires pass installed locally, and configuration of the PASS_STORE_SUBFOLDER through one of the above methods.
4. Vault instance if configured. Suited for production environments. NOTE: This is barely supported. Requires hvac python package.

Future extensions

• Key casing should be more consistent
  • Case-insensitive for hardcoded and load.
  • Upper case for environment variables.
  • Lower case for files and others.
• New special configuration value for switching the secrets directory.
• Wrap secrets in intelligent strings:
  • Instead of returning None on unloaded, return UnknownSecret, that produce error when formatted.
  • repr(secret) should not include contents, but only the secret and how it was loaded.
  • Methods on Secret should be kept minimal.
• Avoid leakage to swap files.
  • Possibly Mlock? Does not seem to work
  • Alternatively use mmap and memoryview?§
• Vault:
  • Ensure vault code path works.
  • Document usage and requirements.

Requirements

Requires Python: >=3.9

Details

PyPI

Jmaa/secret_loader

2024-08-08 16:22:10 +00:00

20

Jon Michael Aanes

Project Site

12 KiB

Assets (2)

secret_loader-0.1.15-py3-none-any.whl 6.2 KiB

secret_loader-0.1.15.tar.gz 5.4 KiB

Versions (16) View all

0.1.18 2024-09-04

0.1.17 2024-09-01

0.1.16 2024-08-25

0.1.15 2024-08-08

0.1.14 2024-08-08

Issues