rt secrets rotate
rt › secrets › rotate
Replace a secret's value, or (--team with no domain/key) re-encrypt every team domain file to its current recipients — value prompted, never a CLI arg
Usage
rt secrets rotate <domain> <key> [flags]
Arguments & flags
| Flag / Arg | Type | Default | Description |
|---|---|---|---|
<domain> | text | Secrets domain (rt, deck, board) — omit with --team to re-encrypt every domain file instead | |
<key> | text | Key name within the domain — omit with --team to re-encrypt every domain file instead | |
--team | text | Rotate in this team's N-recipient store instead of your personal one | |
--stdin | boolean | false | Read the new value from stdin instead of a no-echo prompt (scripting) — ignored by --team with no domain/key, which re-encrypts instead of taking a value |
See code: commands/secrets.ts › secretsRotate