Secrets and nested settings

Drone Support
1

Are secrets or environment variable interpretation supported for nested settings?

For example, I can’t seem to get either of the following steps to work:

- name: mvn_auth
  image: robertstettner/drone-mvn-auth
  environment:
    GITHUB_TOKEN:
      from_secret: github_token
  settings:
    servers:
      - id: github
        username: devilci
        password: $GITHUB_TOKEN
    profiles:
      - id: github
        repositories:
          - id: central
            name: Maven Central
            url: https://repo1.maven.org/maven2
            layout: default
          - id: github
            name: Commitd GitHub
            url: https://maven.pkg.github.com/commitd
            layout: default
     active_profiles:
      - github

 - name: mvn_auth
    image: robertstettner/drone-mvn-auth
    settings:
      servers:
        - id: github
          username: devilci
          password: 
            from_secret: github_token
      profiles:
        - id: github
          repositories:
            - id: central
              name: Maven Central
              url: https://repo1.maven.org/maven2
              layout: default
            - id: github
              name: Commitd GitHub
              url: https://maven.pkg.github.com/commitd
              layout: default
      active_profiles:
        - github

In this particular case I have a workaround:

  - name: mvn_auth
    image: robertstettner/drone-mvn-auth
    settings:
      servers:
        - id: github
          username: devilci
          password: $${env.GITHUB_TOKEN}
      profiles:
        - id: github
          repositories:
            - id: central
              name: Maven Central
              url: https://repo1.maven.org/maven2
              layout: default
            - id: github
              name: Commitd GitHub
              url: https://maven.pkg.github.com/commitd
              layout: default
      active_profiles:
        - github

and adding the environment variable on the later steps.
But curious to know if I’m doing something wrong in the earlier examples.

2

only the following variables can be interpolated:
https://docs.drone.io/pipeline/environment/reference/

secrets are therefore not something you can interpolate in the yaml.