Manually encrypt properties
This page explains how to use the $SECRET syntax to store specific property values in Vault instead of in Platform.
Reference syntax
To reference a secret, replace the property value with a Vault reference in the following format:
For example, "$SECRET_default_password $KEY_key" evaluates to "password".
Include a space before $KEY_.
Encrypt adapter properties
Create a secret in Vault
In Vault, create a path and key name for the property. Use a path and key name that clearly relate to the property.
Turn on Advanced View
Click the Advanced View toggle to view the JSON configuration, which can be easier to edit.
Replace the value with a reference
Remove the existing value and replace it with the Vault reference. For the format, see Reference syntax.
Encrypt integration properties
Create a secret in Vault
In Vault, create a path and key name for the property. Use a path and key name that clearly relate to the property.
Open the integration configuration
Go to Admin Essentials, click Integrations, and select an integration.
Replace the value with a reference
Remove the existing value and replace it with the Vault reference. For the format, see Reference syntax.
Encrypt profile properties
Create a secret in Vault
In Vault, create a path and key name for the property. Use a path and key name that clearly relate to the property.
Open the profile configuration
Go to Admin Essentials, click Profiles, and select the running profile.
Select the property
Click the Configure tab and select the profile property that you want to encrypt.
Replace the value with a reference
Remove the existing value and replace it with the Vault reference. For the format, see Reference syntax.
Encrypt properties.json values
Create a secret in Vault
In Vault, create a path and key name for the property. Use a path and key name that clearly relate to the property.
Open properties.json
Open the properties.json file and select the property that you want to encrypt, for example "mongoProps.credentials.passwd".
You can’t encrypt vaultProps values in properties.json.
Replace the value with a reference
Remove the existing value and replace it with the Vault reference. For the format, see Reference syntax.