Management of secrets during deployment of virtual environment

A system comprising:

• one or more processors;
• and
• a memory in communication with the one or more processors, the memory having computer-readable instructions stored thereupon that, when executed by the one or more processors, cause the system to perform operations comprising:
• generating a solution definition file (SDF) that identifies a configuration in accordance with a user-specific configuration, for a deployment of a virtualized computing environment comprising a plurality of virtual machines, the deployment including a set of the plurality of the virtual machines configured to interoperate during the deployment, the SDF replacing a plurality of secrets needed for the deployment with identifiers;
• generating a schema specifying a format for each identifier included in the SDF and a format of the plurality of secrets, wherein the plurality of secrets and corresponding identifiers are stored in a secure storage;
• validating the plurality of secrets for the set of virtual machines configured to interoperate during the deployment, the validating including detecting whether requirements for any of the plurality of secrets have changed and confirming that the plurality of secrets conform to rules defined in the schema;
• deploying the set of the plurality of the virtual machines in the virtualized computing environment;
• and
• sending the identifiers to the deployed virtual machines, the identifiers usable by the virtual machines to obtain the plurality of secrets from the secure storage.

A computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by one or more processors of a system, cause the system to:

• generate a solution definition file (SDF) that identifies a configuration in accordance with a user-specific configuration, for a deployment of a virtualized computing environment comprising a plurality of virtual machines, the deployment including a set of the plurality of the virtual machines configured to interoperate during the deployment, the SDF replacing a plurality of secrets needed for the deployment with identifiers;
• generate a schema defining a format for each identifier for each secret included in the SDF and a format of the plurality of secrets;
• store the plurality of secrets and corresponding identifiers in a secure storage;
• validate the plurality of secrets for the set of the plurality of the virtual machines configured to interoperate during the deployment, the validating including detecting whether requirements for any of the plurality of secrets have changed and confirming that the plurality of secrets conform to rules defined in the schema;
• deploy the set of the plurality of the virtual machines in the virtualized computing environment;
• and
• send the identifiers to the deployed virtual machines, the identifiers usable by the virtual machines to obtain the plurality of secrets from the secure storage.