Secrets
Frostmoln Secrets is a managed key-value store for your application secrets — API keys, credentials, and configuration — backed by Vault and isolated per project.
Store a secret
Under Secrets → Create, give the secret a name and one or more key-value pairs. Secrets are versioned: writing a new value creates a new version while keeping history, so you can roll back.
bash
fm secrets create app/db --data password=s3cr3t
fm secrets get app/dbVersioning
Each write produces a new version. Read the latest version by default, or a specific version by number. Old versions remain available until explicitly removed.
Good practice
- Reference secrets from your application at runtime rather than baking them into images or source control.
- Scope secrets narrowly and rotate them on your own schedule.