Work with Secrets

StreamNative Cloud Secrets allow you to store and manage sensitive data such as passwords, tokens, and private keys. A Secret may contain numerous keys. You can create Secrets and refer to them for computing purposes (such as Pulsar connectors and Pulsar Functions).

Create Secrets

Use Secrets

After creating a Secret, you can use it when submitting a function or connector.

1. Enable your function/connector to access the Secret.

   Select a tabJavaPython

   public class ExampleFunction implements Function<String, Void> {
       @Override
       public String process(String input, Context context) {
           String secretValue = context.getSecret("SECRET1"); # access secret value with the name you need; this name will be set during submission
           System.out.println(secretValue) # You should never log or print the secret value in a production environment.
       }
   }
   

2. Submit the function/connector referring to the Secret.

   The following is an example of using the pulsar-admin CLI tool.

   ./bin/pulsar-admin functions create \
   --jar /pf-examples/pf-examples-jar-with-dependencies.jar \
   --classname io.streamnative.function.SecretFunction \
   --inputs public/default/secret-test \
   --output public/default/test-output \
   --name SecretTest \
   --secrets '{"SECRET1": {"path": "lambda-sink-secret", "key": "awsAccessKey"}}'
   

Delete Secrets

To delete a Secret, follow these steps.

1. On the left navigation pane, in the Admin area, click Secrets.

2. Click Delete Secret. A dialog box displays, asking Are you sure you want to delete?

3. Enter the Secret name and then click Delete Secret.