Docs

Key Management System

Secret manager

Generic secret manager

Generic secret

Generic secrets store any sensitive data such as user-defined account passwords, access keys, OAuth keys, and tokens.

Create secret

Form module	Form information	Description
Basic information	Secret type	Current secret manager supports five secret types: general secrets, IAM secrets, ECS secrets, RDS secrets, and Redis secrets. To create a general secret, select General secret from the dropdown.
		Secret name	User-defined secret name
		Encryption master key	The encryption master key encrypts the stored secret data. Users can use the system default master key or select a symmetric key they manage themselves in key management. Note: When using a symmetric key managed via KMS, monitor the encryption master key’s status to avoid accidental deletion or expiration that may cause the secret to become unavailable.
		Description	User-defined description of the secret
		Project	Select the project to which this secret resource belongs, only single selection is supported. Project management is a resource management method provided by Volcano Engine, allowing you to group resources used by different businesses or projects. Granting IAM authorization based on projects (a set of resources) helps maintain resource independence and data security. For more information about projects, see Project management.
Secret value configuration	Secret value	Secret value configuration supports both key/value pairs and plain text. Key/value: the secret is stored as key-value pairs, each key corresponds to a value, and multiple pairs can be added. Plain text: the secret is stored as plain text. Length does not exceed 30,720 bytes.

Secret rotation

Rotating a generic secret means storing a new secret value. This operation supports manual execution only and can be done via the console or OpenAPI. Supports writing secret values as key-value pairs or plain text.

Last updated: 2025.06.27 15:24:20