name | string | ✅ Yes | secret name Identifier for the secret used to reference it via variable templating (e.g., {{.nuon.secrets.name}}). Supports templating | - | "database_password" |
display_name | string | No | display name Human-readable name shown in the installer UI. Supports templating | - | "Database Password" |
description | string | ✅ Yes | secret description Detailed explanation of what this secret is for, displayed to users during installation | - | "Master password for the database" |
required | boolean | No | whether secret is required If true, customer must provide a value during installation. If false, can be skipped | - | - |
auto_generate | boolean | No | whether to auto-generate secret If true, a random secret will be generated if customer does not provide one. Cannot be used with required or default | - | - |
format | string | No | secret format Format of the secret value. Supported values: ‘base64’ for base64-encoded secrets, or empty for plain text | - | "base64" |
default | string | No | default value Default value used if customer does not provide one. Cannot be used with required or auto_generate | - | - |
kubernetes_sync | boolean | No | sync to Kubernetes If true, the secret will be synced to a Kubernetes Secret resource | - | - |
kubernetes_secret_namespace | string | No | Kubernetes namespace Kubernetes namespace where the secret will be created. Required if kubernetes_sync is true. Supports templating | - | "default" |
kubernetes_secret_name | string | No | Kubernetes secret name Name of the Kubernetes Secret resource. Required if kubernetes_sync is true. Supports templating | - | "app-secret" |
