Secrets Management using environment variables

[mimi0524]

Hello All-

Has anyone tried using environment variables for managing the secrets with Trino?

Do we need to set the environment variables under root account or the functional id that is running the trino server?

I have tried setting them under both using a profile file and sourced it using .bashrc to reflect the values for the environment variables. Below are the details of each file

Profile file(.test):

export TEST=PARTITIONS

BASHRC file:
if [ -f /etc/bashrc ]; then
. /etc/bashrc
fi
. .test

Env.sh file:
CONFIG_ENV[TEST]=$(printenv TEST)

However this is failing with the error message that the value is pointing to unset environment variable. I have checked the log file and it seems it is defaulting to empty value where as when I run the env.sh file manually, variable values seem to be correct.

If anyone faced this behavior, could you please help on how you resolved it or if there is a better way to manage secrets in trino.

Appreciate your help on this!!

Thanks!!