NodeRings Docs

Secrets

Client org Vault secrets for cloud-init profiles via secret.KEY

Secrets store sensitive values for your client organisation in Vault. Use them in cloud-init user data profiles with {{ secret.API_TOKEN }}: never embed plaintext secrets in profile YAML.

Manage secrets at /organization/secrets under Orchestration → Secrets.

Create and rotate

Create a secret

Open /organization/secrets → Create. The value is shown once at creation.

Reference in a profile

#cloud-config
write_files:
  - path: /root/.api_token
    content: {{ secret.API_TOKEN | tojson }}
    permissions: '0600'

Launch a VM with the profile

Select the profile on VM create. NodeRings compiles Jinja at provision time and injects the resolved YAML: secret values are not stored in the profile itself.

Next

Environment Variables

Client org config for cloud-init profiles via env.KEY

Cloud-Init User Data

Saved user_data profiles that replace provider bootstrap at VM create

On this page

Create and rotateCreate a secretReference in a profileLaunch a VM with the profileNext