Skip to main content
Manage owner-bound local secret custody.
Subcommands: stackkit secrets materialize, stackkit secrets reveal

​
stackkit secrets materialize

Establish custody for secret references in the current StackSpec. Establish or reuse owner-bound local custody for every secret:// reference in the current canonical StackSpec. Run this explicit, idempotent step after adding a workload to an existing standalone workspace and before generate/apply. It never prints secret references or material and never replaces invalid or foreign custody.
Examples

​
stackkit secrets reveal

Print one selected workload secret from local owner custody. Print the existing value of one secret slot declared by a selected workload in the current CUE-valid StackSpec. Output contains secret material; use it only in a private terminal or an intentional pipe. No value is written to deploy logs or receipts.
Examples