Database Connector Secrets

[finexus-howard]

Hi,

I am new to Apache Airbyte. I have deployed an instance of Airbyte using docker compose and configured a source using the MySQL source connector in the dashboard. However, I have managed to see the password of my database is stored in the Airbyte database as plaintext, with the steps below:

1. "docker exec -ti airbyte-db psql -U docker -d airbyte"
2. SELECT * FROM secrets;

May I know is there a way to store the database credentials in an encrypted form, or is there any other alternate best practise to configure Airbyte to store these secrets in a secure way?

Thank you.

[NAjustin]

@finexus-howard If you configure a Secrets Manager, these will be stored there . . . but you'll need to reconnect existing sources/destinations. The docs are light as this is a newer feature, but I believe that the supported Secret Managers are:

• Google Secret Manager
• AWS Secret Manager
• Hashicorp Vault

The most complete docs I've seen are probably in the Platform config readme in GitHub.

The Google option is mentioned in passing here, but you'll see other notes related to the supported options on the original issue/feature request. Associated environment vars are noted here

In Helm-based Kubernetes deployments, the values.yaml config for this feature is under global.secretsManager. This isn't mentioned much in the docs on the main site yet, but example config is shown for both AWS and GCP when it discusses storage.