Credentials secretstore configuration

A secretstore in Automation Suite is an external source used to store sensitive credentials.

To use a secretstore for credentials in Automation Suite, refer to Using a secretstore for credentials.

When using Azure Key Vault, install the External Secrets Operator. For details, refer to Installing the External Secrets Operator.

In this case, make sure to add external-secrets to the excluded components list, as follows:

"exclude_components": [
        ...
        "external-secrets"   
  ]

Using a secretstore for credentials

When deploying Automation Suite, the input.json file typically contains several sensitive data fields and credentials in plain text. To improve security, you can store these credentials in a secret store instead of including them directly in the input.json file.

A secretstore acts as an external system that securely holds sensitive credentials and configuration data. When configured, Automation Suite retrieves credentials from the defined secret store during deployment.

To enable secretstore usage, add the following section to the input.json file:

"secret_store": {
    "enabled": true
}

When this configuration is enabled, Automation Suite reads credentials from the secretstore instead of directly from the input.json file.

Automation Suite supports the following secretstore types:

• Kubernetes Secret
• Azure Key Vault

If any credential stored in the secretstore changes, you must perform the credential update procedure. For details, refer to Updating credentials.