History

Aaron Crawfis fe45e47b3c Standard README filenames		2020-03-03 12:54:40 -08:00
..
README.md	Standard README filenames	2020-03-03 12:54:40 -08:00
component-secrets.md	Standard README filenames	2020-03-03 12:54:40 -08:00
secrets_api.md	Move api specs into concepts folder	2020-03-03 12:52:27 -08:00

README.md

Dapr Secrets Management

Dapr offers developers a consistent way to extract application secrets, without needing to know the specifics of the secret store being used. Secret stores are components in Dapr. Dapr allows users to write new secret stores implementations that can be used both to hold secrets for other Dapr components (for example secrets used by a state store to read/write state) as well as serving the application with a dedicated secret API. Using the secrets API, you can easily read secrets that can be used by the application from the a named secrets store.

Some examples for secret stores include Kubernetes, Hashicorp Vault, Azure KeyVault. See secret stores

Referencing Secret Stores in Dapr Components

Instead of including credentials within a Dapr component, you can place the credentials within a Dapr supported secret store and reference the secret within the Dapr component. For more information read Referencing Secret Stores in Components

Retrieving Secrets

Service code can call the secrets API to retrieve secrets out of the Dapr supported secret store. Read Secrets API Specification for more information.