The information in this doc is based on Juju version 3.5.6, and may not accurately reflect other versions of Juju.
Summary
Update an existing secret.
Usage
secret-set [options] <ID> [key[#base64]=value...]
Options
| Flag | Default | Usage |
|---|---|---|
--description |
the secret description | |
--expire |
either a duration or time when the secret should expire | |
--file |
a YAML file containing secret key values | |
--label |
a label used to identify the secret in hooks | |
--owner |
application | the owner of the secret, either the application or unit |
--rotate |
the secret rotation policy |
Details
Update a secret with a list of key values, or set new metadata. If a value has the ‘#base64’ suffix, it is already in base64 format and no encoding will be performed, otherwise the value will be base64 encoded prior to being stored. To just update selected metadata like rotate policy, do not specify any secret value.
Examples:
secret-set secret:9m4e2mr0ui3e8a215n4g token=34ae35facd4
secret-set secret:9m4e2mr0ui3e8a215n4g key#base64 AA==
secret-set secret:9m4e2mr0ui3e8a215n4g --rotate monthly token=s3cret
secret-set secret:9m4e2mr0ui3e8a215n4g --expire 24h
secret-set secret:9m4e2mr0ui3e8a215n4g --expire 24h token=s3cret
secret-set secret:9m4e2mr0ui3e8a215n4g --expire 2025-01-01T06:06:06 token=s3cret
secret-set secret:9m4e2mr0ui3e8a215n4g --label db-password \
--description "my database password" \
data#base64 s3cret==
secret-set secret:9m4e2mr0ui3e8a215n4g --label db-password \
--description "my database password"
secret-set secret:9m4e2mr0ui3e8a215n4g --label db-password \
--description "my database password" \
--file=/path/to/file