Skip to main content
Gathering Interest

Exctraction pipeline config: Usage of !keyvault directive in connection_string for UID and PWD

Related products:Extractors
  • September 24, 2025
  • 1 reply
  • 22 views
Marius Sørenes
Active

Hello!

It would be most helpful if it was possible to use keyvault secrets directly in defining the connection string of a db-extractor. An example of this below

databases:
  - type: odbc
    name: mssql-sap
    connection-string: >
      DSN=value;
      UID=!keyvault SOME-KEYVAULT-ID;
      PWD=!keyvault SOME-KEYVAULT-SECRET

This would allow us to use client/secret directly from keyvault and enable auto-rotation. Something that is more difficult with having the entire connection string stored in the keyvault

1 reply

T
Seasoned Practitioner
Forum|alt.badge.img

Hi, and thanks for this idea.

From a schedule vs “work by team” perspective, this is likely not something the team can add in the near term. We have a possible roadmap item that could address this no earlier than during the Q2/Q3, 2026 planning window for CDF releases. 

    Terms & ConditionsCookie SettingsAccessibility statement