How to programmatically create an environment variable in Dagster Cloud deployment?

[sergii-imu]

I would like to programmatically create an environment variable in a Dagster Cloud deployment. Is it possible using, for example, the REST API? If so, could you please point me to the relevant documentation?

For example, AWS user and its credentials are managed in its own GitHub repository using Infrastructure as Code (IAC). As part of its CI/CD process, I would like to integrate AWS credentials into the Dagster Cloud deployment. We are currently using Serverless deployment in Dagster Cloud.

Thank you!

[shalabhc]

The GraphQL API allows managing secrets. See https://docs.dagster.io/concepts/webserver/graphql-client for how to get started with the Python GraphQL client. Below are some mutations another customer put together for secrets. To use them you would need to pass the query to the _execute() method on the Python client.

mutation CreateSecret($secretName: String!, $secretValue: String!, $scopes: SecretScopesInput!, $locationNames: [String!]!) {
    createSecret(secretName: $secretName, secretValue: $secretValue, scopes: $scopes, locationNames: $locationNames) {
        __typename
        ... on CreateOrUpdateSecretSuccess {
            secret {
                id
                secretName
                secretValue

                updatedBy {
                    email
                }
                updateTimestamp

                locationNames

                fullDeploymentScope
                allBranchDeploymentsScope
                specificBranchDeploymentScope
                localDeploymentScope
            }
        }
        ...on UnauthorizedError {
            message
        }
        ...on TooManySecretsError {
            message
        }
        ...on InvalidSecretInputError {
            message
        }
        ... on PythonError {
            message
            stack
        }
    }
}

mutation DeleteSecret($secretId: String!) {
    deleteSecret(secretId: $secretId) {
        __typename
        ... on DeleteSecretSuccess {
            secretId
        }
        ...on UnauthorizedError {
            message
        }
        ... on PythonError {
            message
            stack
        }
    }
}
    
query AllSecretsQuery {
    secretsOrError {
        __typename
        ... on Secrets {
            secrets {
                id
                secretName
                secretValue

                updatedBy {
                    email
                }
                updateTimestamp

                locationNames

                fullDeploymentScope
                allBranchDeploymentsScope
                specificBranchDeploymentScope
                localDeploymentScope
                canViewSecretValue
                canEditSecret
            }
        }
        ...on UnauthorizedError {
            message
        }
        ... on PythonError {
            message
            stack
        }
    }
}
mutation UpdateSecret($secretId: String!, $secretName: String!, $secretValue: String!, $scopes: SecretScopesInput!, $locationNames: [String!]!) {
    updateSecret(secretId: $secretId, secretName: $secretName, secretValue: $secretValue, scopes: $scopes, locationNames: $locationNames) {
        __typename
        ... on CreateOrUpdateSecretSuccess {
            secret {
                id
                secretName
                secretValue

                updatedBy {
                    email
                }
                updateTimestamp

                locationNames

                fullDeploymentScope
                allBranchDeploymentsScope
                specificBranchDeploymentScope
                localDeploymentScope
            }
        }
        ...on UnauthorizedError {
            message
        }
        ...on TooManySecretsError {
            message
        }
        ...on InvalidSecretInputError {
            message
        }
        ... on PythonError {
            message
            stack
        }
    }
}

[stevenayers]

CLI functionality for this: dagster-io/dagster-cloud#28