Plexivo Secrets

Plexivo Secrets keeps your credentials out of your source code. Store a value once, attach it to the resources that need it, and rotate it in one place. Plexivo Secrets is included with every plan.

Create a secret#

1. Open Secrets in the sidebar and choose New secret.
2. Name it. Use up to 128 capital letters, digits and underscores, starting with a letter or underscore, for example STRIPE_SECRET_KEY. Names starting PLEXIVO_ are reserved.
3. Paste the value and, if you like, a Description. The value is encrypted as soon as you save it.
4. Choose where to use it under Use it in, or attach it later. Then choose Store secret.

Use a secret#

Attach a secret to a Plexivo App Runner app, a Plexivo Kubernetes workload or your Plexivo Functions. Each one receives it as an environment variable. To attach from a resource’s own page, choose Attach a secret…, pick it and choose Attach.

Rotate a secret#

Open the secret from Secrets, choose New value and save it. Attached apps and workloads restart onto the new version; functions pick it up on their next call. The last 10 versions are kept, and you can Restore any of them.

Who can see a value#

Lists show each secret’s name, version and a fingerprint of its value, never the value itself. Revealing a value needs the owner or admin role and is recorded in the audit log.

Limits#

• Up to 1,000 secrets in an organisation.
• Up to 64 KB per value. Values are text; encode binary values as base64.