noodle secrets

Manage secrets (set/list/delete/reveal/resolve), scoped to org/app/env.

Usage

noodle secrets set|list|delete|reveal|resolve

Subcommands

• set <name> — Set a secret value.
  • --value <value> — Set the managed value directly. (conflicts: --from-env, --from-file, --from-stdin)
  • --from-env <name> — Read the managed value from an environment variable. (conflicts: --value, --from-file, --from-stdin)
  • --from-file <path> — Read the managed value from a regular file. (conflicts: --value, --from-env, --from-stdin)
  • --from-stdin — Read the managed value from standard input. (conflicts: --value, --from-env, --from-file)
  • --runtime local|cloud|other — Select the config store: --runtime, then saved runtime, then local. Cloud is hosted; local uses the containing project's .env.noodle. Local coordinates resolve from explicit fields, a complete project link, or deterministic local/project-app/dev; saved global coordinates are ignored. A complete hosted --org/--app/--env target requires explicit --runtime. (default local)
  • --scope org|app|env — Managed-config scope. (default env)
  • --org <slug> — Organization slug.
  • --app <slug> — Application slug.
  • --env <slug> — Environment slug.
  • --service <url> — Control-plane service URL.
  • --auth-token <token> — Control-plane authentication token.
  • --json — Emit JSON output.
• list — List secrets in scope.
  • --runtime local|cloud|other — Select the config store: --runtime, then saved runtime, then local. Cloud is hosted; local uses the containing project's .env.noodle. Local coordinates resolve from explicit fields, a complete project link, or deterministic local/project-app/dev; saved global coordinates are ignored. A complete hosted --org/--app/--env target requires explicit --runtime. (default local)
  • --scope org|app|env — Managed-config scope. (default env)
  • --org <slug> — Organization slug.
  • --app <slug> — Application slug.
  • --env <slug> — Environment slug.
  • --service <url> — Control-plane service URL.
  • --auth-token <token> — Control-plane authentication token.
  • --json — Emit JSON output.
• delete <name> — Delete a secret.
  • --runtime local|cloud|other — Select the config store: --runtime, then saved runtime, then local. Cloud is hosted; local uses the containing project's .env.noodle. Local coordinates resolve from explicit fields, a complete project link, or deterministic local/project-app/dev; saved global coordinates are ignored. A complete hosted --org/--app/--env target requires explicit --runtime. (default local)
  • --scope org|app|env — Managed-config scope. (default env)
  • --org <slug> — Organization slug.
  • --app <slug> — Application slug.
  • --env <slug> — Environment slug.
  • --service <url> — Control-plane service URL.
  • --auth-token <token> — Control-plane authentication token.
  • --json — Emit JSON output.
• reveal <name> — Open Console Configuration to reveal a secret after fresh sign-in.
  • --runtime cloud — Cloud runtime required for Console reveal.
  • --scope env — Console reveal scope. (default env)
  • --org <slug> — Organization slug.
  • --app <slug> — Application slug.
  • --env <slug> — Environment slug.
  • --service <url> — Control-plane service URL.
  • --auth-token <token> — Control-plane authentication token.
• resolve [<name>] — Resolve the effective secret value(s) for the target.
  • --runtime local|cloud|other — Select the config store: --runtime, then saved runtime, then local. Cloud is hosted; local uses the containing project's .env.noodle. Local coordinates resolve from explicit fields, a complete project link, or deterministic local/project-app/dev; saved global coordinates are ignored. A complete hosted --org/--app/--env target requires explicit --runtime. (default local)
  • --scope org|app|env — Managed-config scope. (default env)
  • --org <slug> — Organization slug.
  • --app <slug> — Application slug.
  • --env <slug> — Environment slug.
  • --service <url> — Control-plane service URL.
  • --auth-token <token> — Control-plane authentication token.
  • --json — Emit JSON output.

Run noodle secrets --help for the latest options and details.