Using the Secrets Store

The secrets store provides a variable storage (key-value pairs) for data that you do not want to expose in plain text in Cloudify blueprints, such as login credentials for a platform. When you create a secret, the key value can be a text string or it can be a file that contains the key value. With the secrets store, you can make sure all secrets (for example credentials to IaaS environments) are stored separately from blueprints, and adhere to isolation requirements between different tenants. You can include the secret’s key in your blueprints and not include the actual values in the blueprints. For more information, see the get_secret intrinsic function.

Creating a secret via the CLI

The cfy secrets command is used to manage Cloudify secrets (key-value pairs).

$ cfy secrets create test -s test_value
...

Secret `test` created

...

For more commands, see secrets command line.

Creating a secret via the Cloudify Web UI

Secret Store Management is performed via the System Resources page in the Cloudify Console.

1. Click Create in the Secret Store Management widget.
2. Insert the secret key, the value (or select the secret file from your file repository) and the visibility level.

1. Click Create.
2. To change the visibility level for the secret, click on the visibility icon in key cell.