# noust secrets

Secret managers (Vault, Doppler, Infisical) that variables refer to.

```bash
noust secrets [OPTIONS] COMMAND [ARGS]...
```

Subcommands: [`add`](#noust-secrets-add), [`kinds`](#noust-secrets-kinds), [`list`](#noust-secrets-list), [`remove`](#noust-secrets-remove), [`test`](#noust-secrets-test)

## noust secrets add

Add a secret manager, or change one.

```bash
noust secrets add [OPTIONS] NAME
```

Arguments: `name`

| Option | What it does | Default |
|---|---|---|
| `--kind` | The manager. |  |
| `--address` | Where it is (https). Needed unless it is hosted. |  |
| `--setting` | A setting of the kind (see 'noust secrets kinds'); repeat for more. |  |
| `--team` | Only this team's applications may name it. |  |
| `--token-stdin` | Read the token from stdin. |  |
| `--keep-token` | Change its settings and keep the token it has. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust secrets kinds

List the kinds of secret manager and the settings each takes.

```bash
noust secrets kinds [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--json` | Print the kinds as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust secrets list

List the secret managers this server knows.

```bash
noust secrets list [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--json` | Print the providers as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust secrets remove

Remove a secret manager and its token.

```bash
noust secrets remove [OPTIONS] NAME
```

Arguments: `name`

| Option | What it does | Default |
|---|---|---|
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust secrets test

Check that a secret manager answers and accepts its token.

```bash
noust secrets test [OPTIONS] NAME
```

Arguments: `name`

| Option | What it does | Default |
|---|---|---|
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |