Create a secret-injection

POST

/secret-injections

• Current canonical versioned path (F3.API.01)

Authorizations

• bearerAuth
• apiTokenAuth

Request Body ^required

object

data

object

organisation

required

One of:

string

DocumentId reference to api::organisation.organisation

string

object

object

key

additional properties

any

cloud_instance

One of:

string

DocumentId reference to api::cloud-instance.cloud-instance

string

object

object

key

additional properties

any

secret_name

required

Logical name identifying the secret (no value stored).

string

secret_ref

required

Vault path or external reference, e.g. secret/data/myapp/db-password.

string

target_service

required

Name of the service or process into which the secret is injected.

string

injection_method

required

How the secret is delivered to the workload.

string

Allowed values: env_var file k8s_secret

env_var_name

Environment variable name (only when injection_method=env_var).

string

file_path

Absolute path inside the container (only when injection_method=file).

string

status

required

string

Allowed values: pending injected failed revoked

last_injected_at

string format: date-time

notes

string

Responses

200

Created

object

data

object

organisation

required

One of:

string

DocumentId reference to api::organisation.organisation

string

object

object

key

additional properties

any

cloud_instance

One of:

string

DocumentId reference to api::cloud-instance.cloud-instance

string

object

object

key

additional properties

any

secret_name

required

Logical name identifying the secret (no value stored).

string

secret_ref

required

Vault path or external reference, e.g. secret/data/myapp/db-password.

string

target_service

required

Name of the service or process into which the secret is injected.

string

injection_method

required

How the secret is delivered to the workload.

string

Allowed values: env_var file k8s_secret

env_var_name

Environment variable name (only when injection_method=env_var).

string

file_path

Absolute path inside the container (only when injection_method=file).

string

status

required

string

Allowed values: pending injected failed revoked

last_injected_at

string format: date-time

notes

string

documentId

string

id

integer

createdAt

string format: date-time

updatedAt

string format: date-time

publishedAt

string format: date-time

nullable

400

Validation error

401

Missing or invalid authentication

403

Not authorized (tenant scope or capability)