Secret commands

Use secret commands for passwords, tokens, and generated keys.

dpl secret create [name] [source]

Creates a new secret.

Interactive:

dpl secret create
dpl secret create api-token

Read stdin:

printf '%s' 'secret-value' | dpl secret create api-token -

Read a file:

dpl secret create api-token ./token.txt

If the interactive value is empty, dpl generates a random 32-character value.

dpl secret ls

Lists secret names.

dpl secret ls

dpl secret cat <name>

Prints plaintext to stdout.

dpl secret cat api-token

Use this carefully. Shell history and terminal scrollback can expose secrets.

dpl secret rm <name>

Removes a secret file.

dpl secret rm api-token

Run dpl check <unit> after removing a secret to find configs that still use it.