README
¶
datadog-secret-backend
datadog-secret-backend is an implementation of the Datadog Agent Secrets Management executable supporting multiple backend secret providers.
IMPORTANT NOTE: A new major version, v1, of datadog-secret-backend has been released with a simplified configuration process and a better integration with the Datadog Agent. This new version is not compatible with the v0 configuration files. v0 will continue to be maintained on the v0 branch of this repository and remains compatible with the Datadog Agent. You can find previous releases of v0 here.
The v1 version comes with the following key improvements:
- The
datadog-secret-backendis now shipped within the Datadog Agent starting with version 7.69. - The backend is now configured directly within the configuration file of the Datadog Agent rather than a dedicated external file.
- The type of backend is now configured directly from the configuration file of the Datadog Agent. There is no need to prefix your secret with the
backendID. More information on how to use thev1can be found here.
Supported Backends
| Backend | Provider | Description |
|---|---|---|
| aws.secrets | aws | Datadog secrets in AWS Secrets Manager |
| aws.ssm | aws | Datadog secrets in AWS Systems Manager Parameter Store |
| azure.keyvault | azure | Datadog secrets in Azure Key Vault |
| hashicorp.vault | hashicorp | Datadog secrets in Hashicorp Vault |
| file.json | file | Datadog secrets in local JSON files |
| file.yaml | file | Datadog secrets in local YAML files |
Usage
Reference each supported backend type's documentation on specific usage examples and configuration options.
License
Documentation
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package backend aggregates all supported backends and allow fetching secrets from them
|
Package backend aggregates all supported backends and allow fetching secrets from them |
|
akeyless
Package akeyless allows to fetch secrets from akeyless service
|
Package akeyless allows to fetch secrets from akeyless service |
|
aws
Package aws allows to fetch secrets from Aws SSM and Secrets Manager service
|
Package aws allows to fetch secrets from Aws SSM and Secrets Manager service |
|
azure
Package azure allows to fetch secrets from Azure keyvault service
|
Package azure allows to fetch secrets from Azure keyvault service |
|
file
Package file allows to fetch secrets from JSON and YAML files
|
Package file allows to fetch secrets from JSON and YAML files |
|
hashicorp
Package hashicorp allows to fetch secrets from Hashicorp vault service
|
Package hashicorp allows to fetch secrets from Hashicorp vault service |
|
Package secret contains the structure to receive and return secrets to the Datadog Agent
|
Package secret contains the structure to receive and return secrets to the Datadog Agent |
Click to show internal directories.
Click to hide internal directories.