Skip to content

feat(ai-rag): support resolving secrets from environment variables and secret vaults#13264

Open
mikyll wants to merge 10 commits intoapache:masterfrom
mikyll:issue_13233
Open

feat(ai-rag): support resolving secrets from environment variables and secret vaults#13264
mikyll wants to merge 10 commits intoapache:masterfrom
mikyll:issue_13233

Conversation

@mikyll
Copy link
Copy Markdown
Contributor

@mikyll mikyll commented Apr 20, 2026

Description

This PR introduces support for resolving the API key value from a secret (env var or secret manager), as detailed in APISIX Docs | Secret. This can prevent writing the plain text value of the secret in the plugin configuration.

Which issue(s) this PR fixes:

Fixes #13233

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

@mikyll mikyll marked this pull request as ready for review April 21, 2026 08:35
@dosubot dosubot Bot added size:L This PR changes 100-499 lines, ignoring generated files. enhancement New feature or request labels Apr 21, 2026
@Baoyuantop
Copy link
Copy Markdown
Contributor

Hi @mikyll, could you please fix the failed ci?

@mikyll
Copy link
Copy Markdown
Contributor Author

mikyll commented Apr 22, 2026

@Baoyuantop I pushed a fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request size:L This PR changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: As a user, I want to reference a secret in ai-rag plugin, so that I don't have to write the apikey in plain text in plugin configuration

2 participants