Configuring a Secret and Injecting It as an Environment Variable

Updated on 2024-05-25 GMT+08:00

View PDF

In this practice, you can add DEW secrets and import them into components as environment variables to protect data.

Click Create Secret and set parameters by referring to Table 1.

**Table 1** Secret parameters
Parameter	Description
Type	Select Shared secret.
Secret Name	Enter a secret name. In this practice, enter db.
Enterprise Project	ID of the enterprise project to which a secret is bound during creation. In this practice, select default.
Secret Value	Select Plaintext and enter 123456.
Description	In this practice, leave it blank.
KMS Encryption Key	Select csms/default.
Associated Event	In this practice, select None.

Click Next. The rotation period cannot be set for shared secrets. Click Next again to confirm the secret information.
Click OK.

You can view the created secret in the secret list. The default status of a secret is Enabled.

Log in to CAE.
Choose System Settings.

If KMS CMKFullAccess and CSMS ReadonlyAccess are not granted, grant them as the administrator.
Figure 1 Authorization
Click Edit in the Secret Configuration module.
Click Create Secret. In the displayed dialog box, select the secret created in Creating a DEW Secret and the required version.

Figure 2 Adding a secret
Click OK.

Click Add Environment Variable and configure the environment variable by referring to Table 2.

**Table 2** Configuring an environment variable
Parameter	Description
Type	Select Import secret.
Name	Name of an environment variable, for example, test1. The name must be unique.
Variable/Variable Reference	Select the secret created in Adding a Secret from the drop-down list.

Figure 3 Configuring an environment variable
Click to enlarge

Click Save in the Operation column. On the Set Environment Variable page, click OK.
Click Activate Settings in the upper part of the page.

In the dialog box displayed on the right, confirm the configurations and click OK for the configurations to take effect.

Choose Instance List.
Select the target environment and application from the drop-down lists in the upper part of the page, and click the target component.
Select the target instance and click Remote Login in the Operation column.
Check the environment variable, which is the same as the secret value in the DEW secret.

Figure 4 Secret value in DEW

Figure 5 Environment variable in remote login

Parent topic: Configuring the Interconnection Between CAE and DEW to Help Applications Obtain Encrypted Secrets from DEW

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.