Secrets can be accessed by cloud functions as environment variables. They are encrypted in transit and at rest, and injected as cleartext directly into the isolated function runtime environment.
Secrets are defined at the
env section of the function configuration in binaris.yml:
Assigning Values to Secrets
Variables with name and value are assigned directly at
binaris.yml. Variables with a name only are assigned from the local environment variables at deploy time: