Creating a secret
- Console
- API
- CLI
- Go
Go to Secrets and choose Create Secret. Under Secret details
give it a Name and an optional Description, paste the first
Value, and leave Encryption key on Platform-managed key
(default) unless you want one of your own keys.The console takes the value as text and base64-encodes it for you; over
the API you encode it yourself.
201 and the secret is at version 1.
base64, 1 byte – 64 KiB
Values travel base64-encoded so arbitrary binary payloads survive JSON
intact. Anything larger than 64 KiB belongs in a bucket, with
the secret holding the reference and the credentials to fetch it — not
crammed inline.
unique per account
Matches
^[a-zA-Z0-9][a-zA-Z0-9._/-]{0,255}$. Slashes are allowed, which is
why prod/api/stripe-key works — and because the CRN is built from the name,
a path convention becomes directly policy-able:
crn:secrets:sa-saopaulo-1:my-account:secret/prod/*.