Best practice for storing secrets in Bitbucket Pipes (Google App Engine) in app.yaml

[tmerrett]

What is the best practice for managing environment variables typically stored in the app.yaml file - obviously do not want to commit this file to source repo as contains secrets and environment based variables. How do you recommend managing this when deploying. We are using the PHP Flex app engine environment, but this best practise would be consistent across all environments.

[Lava Kumar Dukanam _Appfire_]

Hi @tmerrett

You can define custom variables in bitbucket pipelines and mask them by marking it as secured in order to have additional security.

This document shows a set of default variables and how to define custom variables and use them.

Hope it helps!

Thanks,

Lava