Support for secret files about kestra

[anna-geller]

can you say a bit more what benefit loading secrets from a file offer compared to loading them from env variables?

[anna-geller]

we are willing to review a PR that reads environment variables from .env file - would that be something that would make your use case easier?

[nidomiro]

Loading from a .env file is what I'm already doing via the env_file definition of docker compose so there is no benefit for me here.

My usecase would be to be able to store my ssh-keys as files and map them as files into the Kestra container. I would not have to base64 encode them and store them as a huge string that bloats my environment file and make it hard to read.

To my knowledge having secrets as files is fairly common, since there are multiple docker-images that support it, like postgres, traefik, ...
I think this was introduced with docker secrets.
The main benefit security wise is that it can be more difficult to get to the actual secrets, since something like docker inspect won't show them.