What problem does it solve?
Goldsky Secrets provides a secure, scalable way to create, store, rotate, and reference credentials used by common pipeline sinks (PostgreSQL, ClickHouse, Kafka, S3, and more) within Goldsky pipelines, removing the need to hard-code secrets.
Core Features & Use Cases
- Create, list, reveal, update, and delete secrets for sinks (PostgreSQL, ClickHouse, Kafka, S3, etc.) used by pipelines.
- Parse PostgreSQL connection strings automatically to generate the secret payload and create secrets in one step.
- Follow provider-specific guidance for Neon, Supabase, PlanetScale, and other services to simplify secret creation.
Quick Start
Create a new secret by name using the Goldsky CLI:
goldsky secret create --name YOUR_SECRET
The CLI will prompt for the secret type and values, or you can pass a pre-built JSON payload with --value that conforms to the secret schema. For PostgreSQL, use type "jdbc", protocol "postgres", and fields host, port, databaseName, user, password.
If you have a PostgreSQL connection string, run the included script to produce the JSON and then create the secret:
./scripts/parse-connection-string.sh "postgresql://user:pass@host:5432/db" | xargs -I {} goldsky secret create --name YOUR_SECRET --value '{}'
