Updated on 2026-08-27 GMT+08:00

Creating a Secret

A secret is used to verify identity and authorize access. In the information security and identity authentication fields, a secret is a key mechanism to ensure that only authorized users can access the system, resources, or services.

If you use a public pool for your notebook instance, or if the dedicated pool cluster version is before 1.28 and the Everest add-on version is before 2.5.60, you must configure a secret if you choose OBS parallel file system or OBS bucket for data disk type. This topic describes how to create a secret.

Figure 1 Storage type

Constraints

OBS parallel file system and OBS object bucket are in restricted use. To try them, request permission by submitting a service ticket.

Step 1: Creating an Access Key

An access key consists of an access key ID (AK) and a secret access key (SK). It is your long-term identity credential on Huawei Cloud. AK identifies the user, while SK signs request data to ensure confidentiality, integrity, and authenticity.

  1. Log in to the management console, and create an access key. For details, see Access Keys.
    Figure 2 Adding an access key

  2. After the access key is created, view the AK in the access key list. You can also view the AK and SK in the downloaded .csv file.
    Figure 3 AK
    Figure 4 CSV file

Step 2: Creating a Secret

  1. Log in to the DEW console. In the navigation pane on the left, choose Cloud Secret Management Service > Secrets.
  2. In the My Secrets tab, click Create Secret.
  3. On the Create Secret page, configure information and click Next.

    Set the secret values: Choose Secret key/value, click Add, and enter the AK and SK obtained in step 1. For details about the parameters for creating a secret, see Creating a Secret.

    • For the first key, enter accessKeyId and set the value to the AK.
    • For the second key, enter secretAccessKey and set the value to the SK.
      Figure 5 Configuring the secret values
  4. Click Next. Confirm the information and click OK.

    You can view the created secret in the secret list. The default status of a secret is Enabled. You can select this secret when configuring secrets for a notebook instance. For details about how to create a notebook instance, see Creating a Notebook Instance.