1ctl secret
1ctl secret manages sensitive values for deployments. Secrets are stored separately from plain environment variables and are injected into workloads through Kubernetes Secret references.
1ctl secret| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--help, -h |
boolean | No | — | Show help |
Subcommands
Section titled “Subcommands”| Command | Description |
|---|---|
create |
Create a new secret |
list |
List all secrets |
get |
Show secret details |
unset |
Remove a specific key from a secret |
When to use secrets
Section titled “When to use secrets”Use 1ctl secret for:
- database passwords
- API keys
- OAuth client secrets
- JWT signing keys
- private tokens
Use 1ctl config for non-sensitive runtime config.
Repeatable key-value pairs
Section titled “Repeatable key-value pairs”--kv is repeatable and also accepts the --env alias:
1ctl secret create --kv DATABASE_PASSWORD=s3cr3t --kv JWT_SECRET=abc123After creation, secret values are not printed by 1ctl secret list.