Secrets

Warning

Lightbend Orchestration is no longer actively developed and will reach its End of Life on April 15, 2020.

We recommend Migrating to the Improved Kubernetes Deployment Experience.

A non-blocking secrets API is available for Kubernetes. The secrets must be declared in the build.sbt file, and then they can be accessed at runtime using the provided libraries.

Project

For example, given the following build.sbt setting:

secrets += Secret("my-secret", "my-key")

A developer can access this setting at runtime by reading from the file /rp/secrets/%name%/%key% where %name% is transformed to lowercase, and - for non-alphanum instead.

Kubernetes

An operator can declare this secret before generating the deployment resources:

kubectl create secret generic my-secret --from-file=my-key=./path-to-my-secret-file