Create Secrets in the GUI

Create and manage pipeline secrets using the Edge Delta web application.

  3 minute read  

This guide covers how to create, update, and delete secrets using the Edge Delta web application. For master key encryption with the edctl CLI, see Master Key Encryption.

Create a Secret

Step 1: Navigate to Pipeline Settings

  1. Log in to the Edge Delta web application
  2. Navigate to Pipelines in the left sidebar
  3. Select the pipeline where you want to configure secrets
  4. Click the Settings tab
  5. Open the Secrets section

Step 2: Add a New Secret

  1. Click Add Secret
  2. Provide the following information:
    • Secret Name: A unique identifier for the secret (e.g., aws-access-key, datadog-api-token)
    • Value: The sensitive credential value (plaintext - it will be encrypted upon saving)
    • Description: A description to help identify the secret’s purpose
  3. Click Save

The secret value is immediately encrypted and stored securely. The original plaintext value is never retrievable after creation.

Step 3: Reference the Secret in Configuration

When configuring a node in the pipeline builder, fields that support secrets display a Use Secret option.

To use a secret for a field:

  1. Click Use Secret for the field you want to configure.
  2. The field changes to a dropdown list showing available secrets.
  3. Select an existing secret from the list, or click New Secret to create a new secret directly from the node configuration.
Screenshot Screenshot

The New Secret button opens the secret creation dialog, allowing you to add secrets without navigating to the Pipelines Settings tab.

Alternatively, reference the secret in YAML configuration using the template syntax:

'{{ SECRET secret-name }}'

The secret reference must be enclosed in single quotes.

Update a Secret

To update an existing secret value:

  1. Navigate to the pipeline’s Secrets section
  2. Select the secret you want to update
  3. Enter the new secret value
  4. Click Save or Update

The agent will automatically receive the updated configuration within 1-2 minutes (for coordinator mode deployments) and begin using the new credential value.

Delete a Secret

To delete a secret:

  1. Navigate to the pipeline’s Secrets section
  2. Select the secret you want to delete
  3. Click Delete or the delete icon
  4. Confirm the deletion

Warning: Deleting a secret that is referenced in a source or destination node will cause authentication failures. Update or remove the secret references before deleting.

Using Pre-Encrypted Values

If you have encrypted a secret using the edctl CLI tool with coordinator-backed encryption, you can paste the encrypted value directly into the GUI:

  1. Navigate to the Secrets section
  2. Click Add Secret
  3. Enter the secret ID
  4. Paste the encrypted value (starting with edk1_) into the value field
  5. Save the secret

The UI auto-detects encrypted values starting with edk1_ and stores them as-is without re-encrypting.

See Also