> ## Documentation Index
> Fetch the complete documentation index at: /docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Agent home for Datum, with what it is, pricing, and how to act: https://agents.datum.net
> If you can only fetch URLs: read https://www.datum.net/docs/llms.txt in full and open the most specific page for the task. Commands, limits, and field paths are on task, operations, and limits pages, not on section overviews. Pages described as "Documentation is coming soon" are placeholders.
> If you have a shell or can save files: download https://www.datum.net/docs/llms-full.txt (every page, about 740 KB) once and search it with grep, instead of fetching pages one at a time.
> datumctl describes itself: `datumctl api-resources` lists resource types and `datumctl explain <resource>` shows a schema. To act on live resources, use Datum MCP or datumctl. To search the docs, use the Docs MCP server at https://www.datum.net/docs/mcp.

# Secrets

> Create and manage secret resources in a Datum project, from the Cloud Portal or with datumctl.

![Secrets](https://mintcdn.com/datum-4926dda5/9pdr37W0ZlTfIFim/images/secrets.png?fit=max\&auto=format\&n=9pdr37W0ZlTfIFim\&q=85\&s=6bcfb0ec852ccc95b5e69393b1e8fdf4)

## Create a Secret with datumctl

A Secret is a Kubernetes-style resource, so you create it with a manifest and `datumctl apply`. To create a Secret, follow these steps:

1. Save the following manifest as `api-secrets.yaml`:

   ```yaml theme={null}
   apiVersion: v1
   kind: Secret
   metadata:
     name: api-secrets
   type: Opaque
   stringData:
     db-password: PASSWORD
   ```

   Replace `PASSWORD` with the value to store.

2. To create the Secret in your active project, run the following command:

   ```bash theme={null}
   datumctl apply -f api-secrets.yaml
   ```

To target a different project, add `--project your-project-id`. For more information, see [Contexts and scoping](/docs/datumctl/contexts-and-scoping.md).

> [!WARNING]
>
> A manifest with `stringData` holds the secret value in plain text. Don't commit it to source control.

## List and inspect Secrets

To list the Secrets in your project, run the following command:

```bash theme={null}
datumctl get secrets
```

To inspect one Secret, run the following command:

```bash theme={null}
datumctl describe secret api-secrets
```

## Update or delete a Secret

To change a Secret, edit the manifest and run `datumctl apply -f` again. To delete it, run the following command:

```bash theme={null}
datumctl delete secret api-secrets
```

## Use a Secret

Compute workloads can read a Secret as environment variables or as files. For more information, see [Configuration](/docs/compute/configuration.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.