diff --git a/docs/website/docs/general-usage/credentials/config_providers.md b/docs/website/docs/general-usage/credentials/config_providers.md index f3c0bdde96..318b047135 100644 --- a/docs/website/docs/general-usage/credentials/config_providers.md +++ b/docs/website/docs/general-usage/credentials/config_providers.md @@ -92,25 +92,25 @@ sections and key names are separated by "." into the provider-specific formats. 1. For TOML, names are case-sensitive and sections are separated with ".". 1. For Environment Variables, all names are capitalized and sections are separated with double underscore "__". - + Example: To override a token in "secrets.toml": - + ```toml [sources.github] access_token = "GITHUB_API_TOKEN" ``` Use the following environment variable: - ```bash + ```sh export SOURCES__GITHUB__ACCESS_TOKEN="your_token_here" ``` 1. When `dlt` evaluates the request `dlt.secrets["my_section.gcp_credentials"]` it must find the `private_key` for Google credentials. It looks for it as follows: 1. It first searches for environment variable `MY_SECTION__GCP_CREDENTIALS__PRIVATE_KEY` and if not found, - 1. in `secrets.toml` file under `my_section.gcp_credentials.private_key`. + 1. in `secrets.toml` file under `my_section.gcp_credentials.private_key`. This way, `dlt` prioritizes security by using environment variables before looking into configuration files. - + :::info