Secrets overview

DC/OS secrets are used to secure sensitive information such as private and public keys, database passwords, API tokens.

dcos secrets commands

• Create a new environment secret:

  dcos security secrets create --value=top-secret developer/my-secret_cli
  

• Create a new file level secret:

  dcos security secrets create -f my-secret.txt developer/my-secret_file
  

  Secrets REST API

• Add a new secret:

  curl -X PUT --cacert dcos-ca.crt -H "Authorization: token=$(dcos config show core.dcos_acs_token)" \
       -d '{"value":"very-secret"}' \
       $(dcos config show core.dcos_url)/secrets/v1/secret/default/division1/depta/asecret\
        -H 'Content-Type: application/json'
  

  Note: If the secret already exists a conflict "already exists" message will appear.

Issues

Secrets not available in Jobs

Questions

• Namespaces? NOT WORKING IN 1.9.2
• Securing access?
• Why is sealing a secrets store important?