Travis CI: How to set environment variables for deployment script only?

Question

In my .travis.yml configuration, I'd like to set up deployment to different stages (development/production) depending on the branch that triggered the build. I'm using a shell script to deploy, i.e., the script provider.

The question: I need to pass a different environment variables for different stages (mostly AWS keys). And these variables need to be encrypted when stored in version control. So, I'd like to do something like this:

deploy:
  - provider: script
    script: ./deploy.sh development
    env:
      -secure: <encrypted AWS_* variables for dev>
    on:
      branch: master
  - provider: script
    script: ./deploy.sh production
    env:
      -secure: <encrypted AWS_* variables for prod>
    on:
      branch: release

The env key can be used only globally, however. Is it possible somehow to specify the environment only for the specific script and not anything else?

Answer 1

You accomplish this by restricting an environment variable to a specific branch when you define it using the repository settings in the web interface (I don't know how to do this using your .travis.yaml). You can create multiple variables with the same name so long as they are restricted to different branches. In your case, create AWS_SECRET_FOO for master with your dev credential and AWS_SECRET_FOO for release with your production credential.

_{Regardless, it would be awesome if you could define deployment-specific env vars simply for convenience.}