Treatment store

work/secret::store

Parameters

↳ var name: string

Inputs

⇥ secret: Block<Secret<string>>

Outputs

↦ completed: Block<void>
↦ error: Block<string>
↦ failed: Block<void>

Stores a secret on api.melodium.tech, for later runs to read it through api:<name>.

The secret received through secret is revealed only to be sent to api.melodium.tech, as the secret name of the organization of the run, as a new version when it already exists. Names are made of letters, digits, _, . and -, in parts separated by /.

Only programs run by api.melodium.tech store secrets, when the rules of their organization allow it: a rule letting runs write must match name, and public runs never store any. Store credentials a program produces and later runs need, such as a generated database password or the kubeconfig of a cluster it created, rather than putting them in artifacts.

completed is emitted once the secret is stored. Otherwise failed is emitted, and error gives the reason, such as the rule refusing it.