Secrets Management - Zero Runtime

Secrets are environment variables, such as provider keys and tokens, injected into your running agent. They’re stored as named secret sets.

Set secrets at deploy time

The simplest way is to upload your .env file when you deploy:

zeroruntime up --env .env

This creates a secret set from the file, links it to the agent, and records it as secrets.env in zeroruntime.yaml.

Manage secret sets

zeroruntime secrets list                       # all secret sets
zeroruntime secrets create my-secrets -f .env  # create a set from a file
zeroruntime secrets describe my-secrets        # show keys (values hidden)
zeroruntime secrets add my-secrets             # add keys interactively
zeroruntime secrets remove my-secrets          # remove keys interactively
zeroruntime secrets delete my-secrets          # delete the whole set

Omit -f on create to enter keys interactively.

Changing secrets affects only new sessions. Run zeroruntime up to roll the change out to running workers.