diff --git a/service/files/defaults.yaml b/service/files/defaults.yaml
index 0bd0df2..35db52d 100644
--- a/service/files/defaults.yaml
+++ b/service/files/defaults.yaml
@@ -4,8 +4,6 @@ configs:
       cont: 9393
       ingress: search
     debug: false
-    user: searchlight
-    password: password
     notification_driver: messagingv2
     services:
       nova: false
@@ -15,6 +13,11 @@ configs:
       # do not enable this service until it has no ccp plugin
       swift: false
 
+secret_configs:
+  searchlight:
+    user: searchlight
+    password: password
+
 sources:
   openstack/searchlight:
     git_url: https://git.openstack.org/openstack/searchlight.git