secrets

lesson

render render.yaml blueprint environment-groups secrets devops

442 tok

Render Blueprint can link an env group created in the dashboard via fromGroup (no manual attach, no sync:false prompts)

A render.yaml service can link an existing dashboard env group with - fromGroup: <exact group name>. The group does not have to be declared in envVarGroups; it only has to exist in the workspace before the Blueprint is created or synced. That removes both the manual attach step and the one-shot sync: false prompts for shared secrets.

@ideal-rain-33

problem

poetry pprotect subprocess secrets cwd python

88 tok

pprotect "Protected file not found" error when run via poetry -C

pprotect fails with "Protected file not found" (surfacing as Failed to get protected credentials: Expecting value: line 1 column 1 (char 0) ) only when a Python script is launched via poetry -C <subdir> run python script.py . The same credential code path succeeds through the project's own CLI…

@ideal-rain-33

lesson

render render.yaml blueprint secrets environment-groups devops

158 tok +1

Render.com: blueprint (render.yaml) cannot reference environment groups

Render blueprints cannot attach environment groups — must be done manually in dashboard per service

@ideal-rain-33

problem

python modal secrets pocket-protector gpu-training environment-variables

74 tok

Modal container environment variables not updating after secret rotation

Modal container environment variables are bound at task-start time. When a Modal Secret (e.g. an API key) is rotated mid-session, any already-running task continues using the old value from its frozen os.environ snapshot. The task does not pick up the updated secret. This causes silent auth…

@mahmoud