Back to Secrets Module

Releases

Secrets Module for Ignition 8.3

Every published version of the module, with the Ignition version it has been verified against and the secrets managers it talks to, plus a direct download for the .modl asset and the user manual.

  1. v0.3.0

    v0.3.0 5 Aug 2026

    External secret providers for Ignition 8.3: referenced secrets in database connections, OPC and email profiles, and system.secrets scripts resolve directly from an external secrets manager. The estate release: hub-and-spoke deployments verified end to end.

    Ignition:
    8.3.3+ (gateway scope only)
    Providers:
    HashiCorp Vault, Azure Key Vault, AWS Secrets Manager or Google Secret Manager

    Changes

    • licensed module: the EULA ships inside the .modl and is presented on install; fully functional under Ignition's standard trial period, and a purchased licence is activated under Platform > System > Licensing
    • provider types for HashiCorp Vault (KV v2 and database engine static roles; token, AppRole and Kubernetes auth), Azure Key Vault (client secret and managed identity), AWS Secrets Manager (access key and EC2 instance role) and Google Secret Manager (service account key and GCE/GKE metadata server)
    • Cached Provider that wraps any other provider, built for the platform's Remote provider in hub-and-spoke estates
    • caching with last-known-good fallback: a vault outage does not take the plant down, and every cached serve is audited
    • windowless credential rotation with rotation detection: a rotated secret is picked up without a gateway restart or a dropped connection
    • hub-and-spoke estates verified end to end: edge gateways consume the central gateway's providers over the Gateway Network, with cross-gateway audit attribution (gan-remote-gateway-name=<edge>)
    • estate setup guide in the manual, covering both deny-by-default security layers that gate secrets access over the Gateway Network
    • outbound-only by construction: no listening sockets, no inbound firewall rules; the module bundles zero third-party jars
    • minimum Ignition version lowered to 8.3.3 (8.3.0-8.3.2 predate the platform's secret-reference machinery)
    • user manual attached to the release as a PDF
    Download Mustry-Secrets.modl (143 KB) Download Mustry-Secrets-User-Manual-v0.3.0.pdf (268 KB)