> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleander.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Environment

> Store API keys, tokens, and config securely for your organization.

## Overview

The **Environment** settings page lets you manage secrets and external service connections for your organization. Navigate to [Settings → Environment](https://oleander.dev/app/settings/environment) to configure them.

### General

Store custom environment variables that are injected into both **Spark** and **Tasks**. Use these for API keys, database URLs, or any secret your jobs need at runtime.

Click **+ Add variable** to create a new entry. Values are masked by default and can be revealed, copied, or deleted from the variable row.

### BigQuery

Connect your Google Cloud BigQuery project to attribute query cost to dbt runs. You can authenticate in two ways:

* **Grant access** - grant read access to your project via IAM. No JSON key required (recommended).
* **Service account JSON key** - paste your own service account JSON key. Stored encrypted.

Provide your GCP project ID (comma-separate multiple projects if needed) and run the generated `gcloud` commands in Cloud Shell to complete the IAM binding.

<Tip>
  To query BigQuery tables directly in the lake or tasks, go to [Lake settings](https://oleander.dev/app/settings/lake) and add a connection under **BigQuery connections** instead.
</Tip>

### Airflow

Register your MWAA Airflow clusters so oleander can connect Airflow metadata. Click **+ Add Airflow cluster** and provide your cluster details.