use env secret store (#231)

Signed-off-by: Filinto Duran <[email protected]>

Author: filintod

quickstarts/05-multi-agent-workflows/README.md

@@ -69,7 +69,7 @@ OPENAI_API_KEY=your_api_key_here
 
 2. Configure the OpenAI component. You have two options:
 
-   a. Directly update the `key` in [components/openai.yaml](components/openai.yaml):
+   a. Directly update the `key` in [components/openai.yaml](components/openai.yaml), and remove the secretKeyRef:
    ```yaml
    metadata:
      - name: key
@@ -78,21 +78,10 @@ OPENAI_API_KEY=your_api_key_here
 
    b. Use environment variables (recommended):
    ```bash
-   # Get the environment variables from the .env file:
+   # Get the environment variables from the .env file exported to be use
    export $(grep -v '^#' ../../.env | xargs)
-
-   # Create a temporary resources folder with resolved environment variables
-   temp_resources_folder=$(../resolve_env_templates.py ./components)
-
-   # Use the temporary folder when running your dapr commands
-   dapr run -f dapr-random.yaml --resources-path $temp_resources_folder
-
-   # Clean up the temporary folder when done
-   rm -rf $temp_resources_folder
    ```
 
-   Note: The temporary resources folder will be automatically deleted when the Dapr sidecar is stopped or when the computer is restarted.
-
 3. Make sure Dapr is initialized on your system:
 
 ```bash

quickstarts/05-multi-agent-workflows/components/localenv.yaml

@@ -0,0 +1,11 @@
+apiVersion: dapr.io/v1alpha1
+kind: Component
+metadata:
+  name: envvar-secret-store
+spec:
+  type: secretstores.local.env
+  version: v1
+  metadata:
+    # to limit what environment variables are loaded into the secret store to only those prefixed with "MYAPP_"
+    # - name: prefix
+    #   value: "MYAPP_"

quickstarts/05-multi-agent-workflows/components/openai.yaml

@@ -7,8 +7,14 @@ spec:
   version: v1
   metadata:
   - name: key
-    value: "{{OPENAI_API_KEY}}"
+    # we could also use the key directly here but is not recommended
+    # value: "{{OPENAI_API_KEY}}"
+    secretKeyRef:  # using environment variable secret store
+      name: OPENAI_API_KEY
+      key:  OPENAI_API_KEY
   - name: model
-    value: gpt-4o-mini
+    value: gpt-5-2025-08-07
   - name: temperature
     value: 1
+auth:
+  secretStore: envvar-secret-store