Create a new secret for a deployment. Secret values are encrypted and never displayed after creation.
1ctl secret create [key=value...]
| Argument |
Required |
Variadic |
key=value |
No |
Yes |
| Flag |
Type |
Required |
Default |
Description |
--deployment-id |
string |
No |
— |
Deployment ID |
--app |
string |
No |
— |
App name to resolve (alternative to –deployment-id) |
--config |
string |
No |
— |
Config name or path (e.g. staging, satusky.staging.toml). Default: satusky.toml |
--name |
string |
No |
— |
App label (defaults to deployment name, auto-resolved from deployment-id) |
--kv, --env |
array |
No |
— |
Secret key-value pairs (format: KEY=VALUE) |
--help, -h |
boolean |
No |
— |
Show help |
# Create secrets for a deployment
1ctl secret create --deployment-id dep_abc123 --kv DATABASE_PASSWORD=s3cr3t --kv JWT_SECRET=abc123
# Use --env alias (same as --kv)
1ctl secret create --app my-app --env API_KEY=sk-abc --env STRIPE_KEY=pk-xyz
