Secrets, local or in Vault
Store values encrypted on the platform, or keep them in your existing store and reference them.
WhereConsoleTerraform
Introduced Mar 10, 2026
Local
Encrypted at rest. Written once, never returned.
Vault
A reference only — the value never leaves your store.
Used byenv varsegress headersllm providers
How it works
Write-only by design.
Store a value and it is never returned again — agents, tools, and egress rules use it by reference.
Or bring your Vault.
Point at your existing store and the platform holds no value at all.
See it on your own cluster.
Thirty minutes, your infrastructure, your stack. Or skip the call — it is one Helm release onto a cluster you already run.