Skip to main content

putCpEnvSecret

Operator only (is_operator). Creates or overwrites an environment-delivered secret (injected into the tenant runtime) and writes an audit entry. SENSITIVE: plaintext is write-only and never returned.

putCpEnvSecret(
environmentId: String!
name: String!
plaintext: String!
kind: String
): CpEnvSecretRow!

Arguments

putCpEnvSecret.environmentId ● String! non-null scalar

Environment UUID the secret is delivered to.

putCpEnvSecret.name ● String! non-null scalar

Secret name/key (unique per environment).

putCpEnvSecret.plaintext ● String! non-null scalar

Secret value to encrypt and store (write-only).

putCpEnvSecret.kind ● String scalar

Optional classification/kind tag for the secret.

Type

CpEnvSecretRow object