miren secret set
Store a secret value
Stores a value in the cluster's secret store. The value is encrypted at rest and is never echoed, logged, or written to disk by this command — it travels to the server, which holds the only key.
Each write mints a new immutable version and prints its handle, e.g. payments/stripe-key@x1A. Storing a value identical to the current one is reported as unchanged rather than minting a duplicate, so re-running the command is safe.
Rotation does not touch running apps
Rotating a secret mints a new version but leaves anything already running on the value it started with. Old versions stay resolvable, so a rollback comes back on the value it originally shipped with.
Usage
miren secret set <path> [flags]
Arguments
path— Secret path, e.g. payments/stripe-key
Flags
--backend, -b— Backend instance to store into (default: cluster)--cluster, -C— Cluster name--config— Path to the config file--value— Secret value, or @file to read one from a file. Prompts with masking when omitted, which is safer — a literal here is recorded in shell history. A trailing newline is trimmed
Global Options
--options— Path to file containing options--server-address— Server address to connect to (default:127.0.0.1:8443)--verbose, -v— Enable verbose output
Examples
Store a secret, prompting with masking:
miren secret set payments/stripe-key
Store a secret read from a file:
miren secret set tls/cert --value @cert.pem