# \[solved\] Secrets are not accessible in builds **URL:** \ **Category:** Drone Support\ **Created:** [April 2, 2021, 4:30pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651 "2021-04-02T16:30:22Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![LukasHirt](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/lukashirt/32/3229_2.png) [@LukasHirt](https://drone.discourse.group/u/LukasHirt)\ **Post date:** [April 2, 2021, 4:30pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/1 "2021-04-02T16:30:22Z")
Hi, I’ve created two secrets for a repository. One is available also for PRs, one not. I am not however able to use those secrets in my builds… I tried to check if they exists via command `env`. That didn’t output them. Checking in the database they actually exists: ```auto sqlite> SELECT * FROM secrets; 1|1|netlify_site_id| **redacted** |1|0 3|1|netlify_token| **redacted** |0|0 sqlite> ``` This is my docker-compose file to showcase my instance: ```auto version: '3.7' services: drone-server: container_name: drone_server image: drone/drone:1 ports: - 80:80 - 443:443 networks: - drone volumes: - /var/lib/drone:/data - /var/run/docker.sock:/var/run/docker.sock restart: always environment: - DRONE_GITHUB_CLIENT_ID= **redacted** - DRONE_GITHUB_CLIENT_SECRET= **redacted** - DRONE_RPC_SECRET= **redacted** - DRONE_SERVER_HOST=drone.hirt.cz - DRONE_SERVER_PROTO=https - DRONE_AGENTS_DISABLED=true - DRONE_LOGS_DEBUG=true - DRONE_LOGS_TRACE=true - DRONE_LOGS_PRETTY=true - DRONE_LOGS_COLOR=true - DEBUG=true drone-agent: container_name: drone_runner_docker image: drone/drone-runner-docker:1 volumes: - /var/run/docker.sock:/var/run/docker.sock restart: always depends_on: - drone-server networks: - drone ports: - 3000:3000 environment: - DRONE_RPC_PROTO=https - DRONE_RPC_HOST=drone.hirt.cz - DRONE_RPC_SECRET= **redacted** - DRONE_RUNNER_CAPACITY=1 - DRONE_RUNNER_NAME=${HOSTNAME} - DRONE_LOGS_TRACE=true - DRONE_LOGS_PRETTY=true - DRONE_LOGS_COLOR=true - DEBUG=true networks: drone: name: drone_network ``` Any pointers on how to debug this? ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [April 2, 2021, 9:10pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/2 "2021-04-02T21:10:04Z")
This thread provides some tips to help debug: [http://discuss.harness.io/t/problems-with-secrets/3286](http://discuss.harness.io/t/problems-with-secrets/3286) ---
**Author:** ![LukasHirt](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/lukashirt/32/3229_2.png) [@LukasHirt](https://drone.discourse.group/u/LukasHirt)\ **Post date:** [April 3, 2021, 5:35pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/3 "2021-04-03T17:35:00Z")
> [@On another topic](https://drone.discourse.group/t/8954/2): > > This thread provides some tips to help debug I have looked into that already but that hasn’t helped me solve the issue. I tried in the meantime to use postgres instead of sqlite to see if that maybe would make any difference but unsuccessfully. I am not sure where to look next. I tried logging those tokens both via `- env` command and via `- echo ${{netlify_token}}` but neither outputs that secret. But still even with postgres I can see that secret in the database and it is enabled on PRs. In the logs I haven’t found anything helpful - all info is about starting and finishing pipelines. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [April 3, 2021, 10:01pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/4 "2021-04-03T22:01:49Z")
happy to advise further, however, per the thread we required additional details > If you have tried all of the above and are sill experiencing issues, please create a discourse thread that includes **all** of the requested information: > > 1. Version of Drone. If using `drone exec` please make this clear. > 2. Full result of `drone repo info ` _(Do not redact the repository name)_ > 3. Full result of `drone build info ` > 4. Full result of `drone secret info ` for each secret > 5. Full yaml configuration file > 6. Full logs for the failed pipeline step, copied from the user interface > 7. Runner configuration. ---
**Author:** ![LukasHirt](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/lukashirt/32/3229_2.png) [@LukasHirt](https://drone.discourse.group/u/LukasHirt)\ **Post date:** [April 4, 2021, 5:12pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/5 "2021-04-04T17:12:14Z")
Yes, sorry for not providing it already. 1. 1.10.1 2. ```auto Owner: LukasHirt Repo: dragonflip-web Config: .drone.yml Visibility: private Private: true Trusted: false Protected: false Remote: https://github.com/LukasHirt/dragonflip-web.git ``` 1. ```auto Number: 4 Status: success Event: pull_request Commit: bec94ea16a27a3c0bb5b2524ef63dc538eb07e55 Branch: master Ref: refs/pull/8/head Author: LukasHirt Message: Cd ``` 1. ```auto netlify_token Pull Request Read: true Pull Request Write: false ``` 1. ```auto --- kind: pipeline type: docker name: Test steps: - name: env image: docker secrets: [netlify_site_id] commands: - env - echo $${netlify_token} - echo $${NETLIFY_TOKEN} - name: Install NPM dependencies image: node:current-alpine3.13 commands: - yarn install --frozen-lockfile - name: Lint image: node:current-alpine3.13 commands: - yarn lint trigger: ref: - refs/pull/** ---yml kind: pipeline type: docker name: Deploy - name: Staging image: lucap/drone-netlify environment: TOKEN: from_secret: netlify_token SITE_ID: from_secret: netlify_site_id trigger: ref: - refs/heads/master ``` 1. ```auto STAGE_DEPENDS_ON= DRONE_COMMIT_AFTER=bec94ea16a27a3c0bb5b2524ef63dc538eb07e55 DRONE_STAGE_VARIANT= CI_REPO_LINK=https://github.com/LukasHirt/dragonflip-web CI_COMMIT_AUTHOR=LukasHirt DRONE_STAGE_STARTED=1617470727 DRONE_STAGE_NUMBER=1 DRONE_COMMIT=bec94ea16a27a3c0bb5b2524ef63dc538eb07e55 CI_REPO_REMOTE=https://github.com/LukasHirt/dragonflip-web.git CI_COMMIT_BRANCH=master DRONE_PULL_REQUEST=8 CI_REPO_PRIVATE=true DRONE_RUNNER_HOST=efa972cb52fb DOCKER_VERSION=20.10.5 DRONE_BUILD_EVENT=pull_request DRONE_JOB_STARTED=1617470727 DRONE_WORKSPACE_PATH= DOCKER_TLS_CERTDIR=/certs DRONE_BUILD_CREATED=1617470726 DRONE_COMMIT_SHA=bec94ea16a27a3c0bb5b2524ef63dc538eb07e55 DRONE_COMMIT_AUTHOR_EMAIL= DRONE_REPO_NAME=dragonflip-web DRONE_STAGE_MACHINE=efa972cb52fb DRONE_COMMIT_REF=refs/pull/8/head CI_BUILD_STATUS=success CI_WORKSPACE_BASE=/drone/src DRONE_MACHINE=efa972cb52fb PWD=/drone/src DRONE_BUILD_FINISHED=1617470730 DRONE_COMMIT_LINK=https://github.com/LukasHirt/dragonflip-web/pull/8 DOCKER_NETWORK_ID=jsza515nvqfih0ghjx4wh3vt26139bc2 CI_COMMIT_MESSAGE=Cd DRONE_STEP_NAME=env DRONE_REPO=LukasHirt/dragonflip-web DRONE_COMMIT_AUTHOR_NAME= DRONE_SYSTEM_VERSION=1.10.1 DRONE_DOCKER_NETWORK_ID=jsza515nvqfih0ghjx4wh3vt26139bc2 CI_JOB_STATUS=success CI_REMOTE_URL=https://github.com/LukasHirt/dragonflip-web.git DRONE_STAGE_FINISHED=1617470730 + echo ${netlify_token} + echo ${NETLIFY_TOKEN} ``` 1. Not sure what to pass here TBH. Is the docker-compose from the original question enough or need something more? ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [April 4, 2021, 10:31pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/6 "2021-04-04T22:31:57Z")
It looks like a problem with the yaml syntax. You need to use the [`from_secret`](https://docs.drone.io/secret/repository/) notation to inject the secret into your environment. ```auto kind: pipeline type: docker name: Test steps: - name: env image: docker environment: NETLIFY_TOKEN: from_secret: netlify_token commands: - env ``` ---
**Author:** ![LukasHirt](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/lukashirt/32/3229_2.png) [@LukasHirt](https://drone.discourse.group/u/LukasHirt)\ **Post date:** [April 5, 2021, 11:12am UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/7 "2021-04-05T11:12:13Z")
Ah, didn’t know that I need to pass them there first 🤦‍♂️ Thank a lot for looking into this! It’s working now. ---
**Author:** ![bradrydzewski](https://yyz1.discourse-cdn.com/flex003/user_avatar/drone.discourse.group/bradrydzewski/32/3513_2.png) [@bradrydzewski](https://drone.discourse.group/u/bradrydzewski)\ **Post date:** [April 5, 2021, 3:07pm UTC](https://drone.discourse.group/t/solved-secrets-are-not-accessible-in-builds/10651/8 "2021-04-05T15:07:04Z")