External secret management in CloudBees platform enhances security by seamlessly integrating with external secret providers like CyberArk Conjur. This feature allows users to securely fetch and use secrets within their workflow jobs, while ensuring sensitive information is masked in system logs and the UI to prevent unauthorized exposure. CloudBees platform uses secure protocols during the retrieval and utilization of secrets from external providers. This section provides detailed guidance on setting up external secret providers, including sample YAML configurations to demonstrate how secrets are utilized within workflows, and the safeguards in place to keep sensitive information confidential.
Using CyberArk Conjur for secrets management
Conjur is an open source solution for implementing secrets management best practices across all of your applications, containers, cloud platforms, and other DevOps tooling.
Prerequisites
Configure the following to enable secrets management via Conjur:
-
Install Conjur OpenSource using Docker.
-
Add secrets to Conjur using three categories of policy management: protected resources, applications, and entitlements.
Fetch secrets from Conjur
Set up your CloudBees platform workflows to use secrets from Conjur. Add the CloudBees Conjur action to each job which requires secrets.