Provide a predictable container path for secrets

[danfairs]

Currently, file-based secrets are mounted in under $BENTOML_HOME. This makes it difficult to refer to secrets from environment variables.

My use case is that I would like to set GOOGLE_APPLICATION_CREDENTIALS, so that my service can integrate with Google Cloud. I have the JSON key file mounted as a file secret, but I can't set the path for that variable as I don't know BENTOML_HOME in advance.

Instead, I have to load the credentials dynamically in my service code. It would be great to be able to do this sort of thing without requiring custom code in the service.

[frostming]

@xianml any suggestions for this?

[aayostem]

i'll suggest you extend existing @env decorator to automatically set environment variables from secrets, eliminating the need for custom code in services.

@env(
secrets={
"GOOGLE_APPLICATION_CREDENTIALS": "google-credentials-file",
"DATABASE_URL": " postgresql+asyncpg://user:user_password@/dbname?host=/cloudsql/project:region:instance-id"
}
)

[aayostem]

@frostming I'll suggest that there should be a a simple plugin that sets env vars from secrets because it's faster to implement