> ## Documentation Index
> Fetch the complete documentation index at: https://docs.revolte.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# External Secrets

> Integrate third-party secret managers to centrally store and pull application credentials.

Centralize credential authority by linking external secret management tools (such as HashiCorp Vault). The external secrets integration dynamically imports existing keys and passwords, allowing teams to safely reference them across all active services.

## Integration Workflow

Connect your Vault provider in four steps:

<Steps>
  <Step title="Select Extensions">
    Click on **Extensions** in the left sidebar of the Revolte console.
  </Step>

  <Step title="Select Vault">
    Locate **Vault** under the recommended integrations and select it.
  </Step>

  <Step title="Choose provider">
    Open the **Select the provider** dropdown and choose your provider (e.g., `hashicorp vault`).
  </Step>

  <Step title="Fill integration details">
    Fill in the required authentication and access fields to establish a secure link. Revolte will pull your existing secrets automatically.
  </Step>
</Steps>

<Info>
  Environment variables must be configured in your `revolte.yaml` configuration file to properly reference and inject the synchronized Vault secrets into your application services.
</Info>

***

## Reference

### FAQ

<AccordionGroup>
  <Accordion title="Are my Vault credentials stored securely inside Revolte?">
    Yes. Connection metadata and secret values are stored under industry-standard AES-256 encryption using customer-isolated KMS keys.
  </Accordion>

  <Accordion title="Does Revolte automatically sync rotated secrets?">
    Revolte pulls credentials dynamically from the linked Vault during container build and deploy phases, ensuring running workloads use the latest active secrets.
  </Accordion>
</AccordionGroup>

***

## Related

* [Secrets Overview](/deployments/services/secrets/overview)
* [Revolte Secrets](/deployments/services/secrets/revolte-secrets)
* [Web Services](/deployments/services/web-services)

### Support Policy

For advanced assistance with private VPC configurations, enterprise cluster peerings, or custom vault providers, connect with our support engineers on our [Contact Page](https://revolte.ai/contact).