The EWC Secret Manager, based on OpenBao, provides a centralised and secure system for managing secrets, credentials, and sensitive configuration data across the European Weather Cloud.

It enables tenants to store, access and rotate secrets used by applications and services running in the EWC environment.

The Secret Manager is a core component of the European Weather Cloud, available to all tenancies. It supports secure secret distribution for services such as Kubernetes workloads through External Secret Operator, automation pipelines, communit hub item integration and other cloud‑native applications.

Every tenancy has access to a namespace matching the tenancy name.

Roles for access are assigned through EWC IAM. Please check EWC Service Related Roles page here.