--- title: Secrets for Traffic Policy debuts in the dashboard and... description: Secrets for Traffic Policy, ngrok's feature for storing sensitive values like API keys and passwords in encrypted vaults and referencing them dynamically at... canonical: https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Secrets for Traffic Policy debuts in the dashboard and goes GA | daily.dev og:description: Secrets for Traffic Policy, ngrok's feature for storing sensitive values like API keys and passwords in encrypted vaults and referencing them dynamically at... og:url: https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq og:image: https://api.daily.dev/og/posts/rocudORjq.png og:image:alt: Secrets for Traffic Policy debuts in the dashboard and goes GA og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Secrets for Traffic Policy debuts in the dashboard and goes GA **[ngrok Blog](https://daily.dev/sources/ngrok)** · 3 min read · 0 upvotes · 0 comments ## Summary Secrets for Traffic Policy, ngrok's feature for storing sensitive values like API keys and passwords in encrypted vaults and referencing them dynamically at runtime, is now generally available. The GA release adds a dashboard UI for managing vaults and secrets, support for the Kubernetes External Secrets Operator to sync secrets from external managers like Vault, AWS Secrets Manager, or GCP Secret Manager, and stability and API improvements. Secrets can be referenced in Traffic Policy YAML using the secrets.get() macro and rotated via dashboard, CLI, API, or ESO without editing the policy itself. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I reference a secret in an ngrok Traffic Policy without hardcoding it? Use the secrets.get() macro inside the traffic policy YAML to dynamically pull a value from an encrypted vault at runtime, instead of hardcoding it. Create a vault, add a secret with a unique name, then paste the secrets.get() macro into an action such as verify-webhook. Secrets can then be rotated from the dashboard, CLI, API, or the Kubernetes External Secrets Operator without touching the policy file. _Track how gateway tools like ngrok evolve secrets handling by following backend security updates on daily.dev._ ### Does ngrok support syncing secrets from Kubernetes external secret managers like AWS Secrets Manager or Vault? Yes, ngrok's Secrets for Traffic Policy now generally available includes a Kubernetes External Secrets Operator (ESO) integration that continuously syncs secrets from external managers such as HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager into ngrok vaults. The external store remains the source of truth while ngrok maintains always-fresh, referenceable secrets with seamless rotation. _Kubernetes teams weighing secrets-sync options can keep up with integrations like this via daily.dev._ ## Similar posts on daily.dev - [GitLab Secrets Manager adds ESO, Terraform, API support](https://daily.dev/posts/gitlab-secrets-manager-adds-eso-terraform-api-support-b8lsupnhb) · GitLab · 1 upvotes · 0 comments - [How to create and manage secrets with Grafana Cloud Synthetic Monitoring](https://daily.dev/posts/how-to-create-and-manage-secrets-with-grafana-cloud-synthetic-monitoring-gbscohesz) · Grafana Labs · 0 upvotes · 0 comments - [Introducing the external secrets operator for OpenShift](https://daily.dev/posts/introducing-the-external-secrets-operator-for-openshift-nnj9a2pnf) · Red Hat Developer · 0 upvotes · 0 comments - [How to Sync AWS Secrets Manager Secrets into Kubernetes with the External Secrets Operator](https://daily.dev/posts/how-to-sync-aws-secrets-manager-secrets-into-kubernetes-with-the-external-secrets-operator-dlh5pprjr) · freeCodeCamp · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devtools](https://daily.dev/tags/devtools), [#kubernetes](https://daily.dev/tags/kubernetes), [#api-gateway](https://daily.dev/tags/api-gateway), [#secrets-management](https://daily.dev/tags/secrets-management) [View this post on daily.dev](https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Secrets for Traffic Policy debuts in the dashboard and goes GA","url":"https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq"},"datePublished":"2026-08-23T07:21:12.749Z","dateModified":"2026-08-23T07:29:20.716Z","description":"Secrets for Traffic Policy, ngrok's feature for storing sensitive values like API keys and passwords in encrypted vaults and referencing them dynamically at...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f58c59d8ed437d21a0e5109cf2bdae2d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f58c59d8ed437d21a0e5109cf2bdae2d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"ngrok Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ngrok Blog","logo":"https://media.daily.dev/image/upload/s--718XXxvE--/f_auto,q_auto/v1787469610/logos/ngrok?_a=BAMAMicg0","url":"https://daily.dev/sources/ngrok"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devtools,kubernetes,api-gateway,secrets-management","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ngrok Blog","item":"https://daily.dev/sources/ngrok"},{"@type":"ListItem","position":3,"name":"Secrets for Traffic Policy debuts in the dashboard and goes GA"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/secrets-for-traffic-policy-debuts-in-the-dashboard-and-goes-ga-rocudorjq#faq","mainEntity":[{"@type":"Question","name":"How do I reference a secret in an ngrok Traffic Policy without hardcoding it?","acceptedAnswer":{"@type":"Answer","text":"Use the secrets.get() macro inside the traffic policy YAML to dynamically pull a value from an encrypted vault at runtime, instead of hardcoding it. Create a vault, add a secret with a unique name, then paste the secrets.get() macro into an action such as verify-webhook. Secrets can then be rotated from the dashboard, CLI, API, or the Kubernetes External Secrets Operator without touching the policy file. Track how gateway tools like ngrok evolve secrets handling by following backend security updates on daily.dev."}},{"@type":"Question","name":"Does ngrok support syncing secrets from Kubernetes external secret managers like AWS Secrets Manager or Vault?","acceptedAnswer":{"@type":"Answer","text":"Yes, ngrok's Secrets for Traffic Policy now generally available includes a Kubernetes External Secrets Operator (ESO) integration that continuously syncs secrets from external managers such as HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager into ngrok vaults. The external store remains the source of truth while ngrok maintains always-fresh, referenceable secrets with seamless rotation. Kubernetes teams weighing secrets-sync options can keep up with integrations like this via daily.dev."}}]} ```