goldsky-secrets

What problem does it solve?

Goldsky Secrets provides a secure, scalable way to create, store, rotate, and reference credentials used by common pipeline sinks (PostgreSQL, ClickHouse, Kafka, S3, and more) within Goldsky pipelines, removing the need to hard-code secrets.

Core Features & Use Cases

• Create, list, reveal, update, and delete secrets for sinks (PostgreSQL, ClickHouse, Kafka, S3, etc.) used by pipelines.
• Parse PostgreSQL connection strings automatically to generate the secret payload and create secrets in one step.
• Follow provider-specific guidance for Neon, Supabase, PlanetScale, and other services to simplify secret creation.

Quick Start

Create a new secret by name using the Goldsky CLI: goldsky secret create --name YOUR_SECRET The CLI will prompt for the secret type and values, or you can pass a pre-built JSON payload with --value that conforms to the secret schema. For PostgreSQL, use type "jdbc", protocol "postgres", and fields host, port, databaseName, user, password. If you have a PostgreSQL connection string, run the included script to produce the JSON and then create the secret: ./scripts/parse-connection-string.sh "postgresql://user:pass@host:5432/db" | xargs -I {} goldsky secret create --name YOUR_SECRET --value '{}'