Secrets

runta secret set

Store or replace a tenant secret value.

runta secret set [OPTIONS] <secret_name>

Option	Description
--value-env <value_env>	Read the secret value from this environment variable.
--value-stdin	Read the secret value from stdin.
--prompt	Prompt for the secret value.
--cache-ttl-secs <cache_ttl_secs>	Worker secret value cache TTL in seconds. Defaults to 0.

runta secret list, describe, and delete

runta secret list
runta secret describe <secret_name_or_id>
runta secret delete <secret_name_or_id>

runta secret rule set

Store or replace a runtime-scoped secret stub.

runta secret rule set <runtime_name> \
  --host <host> \
  --secret <secret_name_or_id> \
  --header <header_name> \
  --template <template> \
  [--path <path>]
runta secret rule set -f <file>

Option	Description
--host <host>	Destination host pattern.
--path <path>	Destination path pattern. Defaults to all paths.
--secret <secret_name_or_id>	Stored secret value name or ID.
--header <header_name>	Header to inject.
--template <template>	Injected value template. Use ${credential} for the stored value.
-f, --file <file>	YAML stub file. Omit <runtime_name> when using a file.

YAML files use a top-level rules list:

rules:
  - runtime: demo
    host: api.openai.com
    path: /v1/*
    secret: openai-api-key
    header: Authorization
    template: Bearer ${credential}

runta secret rule list, describe, and delete

runta secret rule list [--runtime <runtime_name>]
runta secret rule describe <stub_id>
runta secret rule delete <stub_id>