Azure / Azure/azure-cli

Is there a way to retrieve secret values from the CLI?

Open
#19,212 2 comments 2 reactions 0 assignees View on GitHub
act-platform-engineering-squad customer-reported DevOps Pipelines Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

Using `variable-group show` we can retrieve all variables in that group but all secrets have null values with "isSecret" flag as true.

Is there any way we can use that boolean flag to use any (other) CLI command to retrieve the value for a secret?

I understand that might represent a security issue but that could enable us to use those values dynamically.
I wonder if that issue might be fixed with any RBAC rules.
Currently I'm trying to use a variable group to inject values into Azure Key Vault and I'd like to set the key/value as we see in the variable group.

---
#### Document Details

⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*

* ID: a067cc50-3fa1-3f19-1c8f-d0077be070d8
* Version Independent ID: 6a0e745f-e9ee-644a-85ce-db299b10551d
* Content: [az pipelines variable-group](https://docs.microsoft.com/en-us/cli/azure/pipelines/variable-group?view=azure-cli-latest#az_pipelines_variable_group_show)
* Content Source: [latest/docs-ref-autogen/pipelines/variable-group.yml](https://github.com/MicrosoftDocs/azure-docs-cli/blob/master/latest/docs-ref-autogen/pipelines/variable-group.yml)
* GitHub Login: @rloutlaw
* Microsoft Alias: **routlaw**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.