Smarter Secret

Overview

Smarter Secret is a standard credentials vault, seamlessly integrated with every other Smarter resource that relies on sensitive information for authentication and connectivity. Secrets can be shared across teams and referenced by dependent resources without ever exposing the underlying value, and, like any other Smarter resource, a Secret is defined and managed through a standard SAM manifest.

  • Smarter Secret: a Django ORM-based secure store

  • for sensitive information such as SQL connection strings and API keys. Secrets

  • are consumed by other Smarter resources to supply the authentication credentials

  • those resources need to reach remote services.

Example Smarter Secret Manifest
apiVersion: smarter.sh/v1
kind: Secret
metadata:
  annotations: []
  description: an example secret manifest for the Smarter API Secret
  name: example_secret
  tags:
    - example
    - secret
  version: 1.0.0
spec:
  config:
    expiration_date: 2026-06-05
    value: <** your unencrypted credential value **>

Platform administrators can also read and change a Secret’s value from the command line, inside the Smarter application container. manage.py get_secret decrypts and prints the value of a Secret that a user may read, and manage.py update_secret encrypts and saves a new value for a Secret that the user owns, prompting for the value if --value is not given:

python manage.py get_secret --name openai_api_key --username admin
python manage.py update_secret --name openai_api_key --username admin

Technical Reference