Tencent Cloud Secrets Manager (SSM)

Detailed information on the Tencent Cloud Secrets Manager (SSM) - secret store component

Component format

To setup Tencent Cloud Secrets Manager (SSM) secret store create a component of type secretstores.tencentcloud.ssm. See this guide on how to create and apply a secretstore configuration. See this guide on referencing secrets to retrieve and use the secret with Dapr components.

apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: tencentcloudssm
spec:
  type: secretstores.tencentcloud.ssm
  version: v1
  metadata:
  - name: region
    value: "[tencentcloud_region]"
  - name: secretId
    value: "[tencentcloud_secret_id]"
  - name: secretKey
    value: "[tencentcloud_secret_key]"
  - name: token
    value: "[tencentcloud_secret_token]"

Warning

The above example uses secrets as plain strings. It is recommended to use a local secret store such as Kubernetes secret store or a local file to bootstrap secure key storage.

Spec metadata fields

Field	Required	Details	Example
region	Y	The specific region the Tencent SSM instance is deployed in	`"ap-beijing-3"`
secretId	Y	The SecretId of the Tencent Cloud account	`"xyz"`
secretKey	Y	The SecretKey of the Tencent Cloud account	`"xyz"`
token	N	The Token of the Tencent Cloud account. This is required only if using temporary credentials	`""`

Optional per-request metadata properties

The following optional query parameters can be provided when retrieving secrets from this secret store:

Query Parameter	Description
`metadata.version_id`	Version for the given secret key.

Setup Tencent Cloud Secrets Manager (SSM)

Setup Tencent Cloud Secrets Manager (SSM) using the Tencent Cloud documentation: https://www.tencentcloud.com/products/ssm

Last modified August 29, 2025: [1.16] Adds Tencent Cloud Secrets Manager (SSM) (#4833) (875a9fe0)