Skip to content

Custom Secret Management

There's plenty of technologies used to manage Secrets in GitOps. Some store the encrypted Secret data in a git repository and use a cluster addon to decrypt the data during deployment, some use a reference to an external secret manager/vault.

To enable the use of CAST AI Agent with custom secret managers, the Agent helm chart provides the parameter apiKeySecretRef.

# Name of secret with Token to be used for authorizing agent access to the API
# apiKey and apiKeySecretRef are mutually exclusive
# The referenced secret must provide the token in .data["API_KEY"]
apiKeySecretRef: ""

Example

CAST AI Agent

An example of using CAST AI Agent helm chart with custom secret:

helm repo add castai-helm https://castai.github.io/helm-charts
helm repo update
helm upgrade --install castai-agent castai-helm/castai-agent -n castai-agent \
  --set apiKeySecretRef=<your-custom-secret> \
  --set clusterID=<your-cluster-id>

CAST AI Cluster Controller

An example of using CAST AI Cluster Controller helm chart with custom secret:

helm repo add castai-helm https://castai.github.io/helm-charts
helm repo update
helm upgrade --install castai-agent castai-helm/castai-cluster-controller -n castai-agent \
  --set castai.apiKeySecretRef=<your-custom-secret> \
  --set castai.clusterID=<your-cluster-id>