Path

Secret

onSecretChange?.(e.detail)} bind:checked={variable.is_secret} disabled={unsecureNeedsLoad || (edit && (!actingUser || actingUser.operator || isEncryptedDraftValue(variable.value)))} /> {#if unsecureNeedsLoad && can_write && !actingUser?.operator} Load the secret value or enter a new one to make it non-secret {/if}

{#if variable.is_secret} Every secret is encrypted at rest and in transit with a key specific to this workspace. In addition, any read of a secret variable generates an audit log whose operation name is: variables.decrypt_secret {/if}

Variable value {#if !isEncryptedDraftValue(variable.value)} ({variable.value.length}/{MAX_VARIABLE_LENGTH} characters) {/if} {#if edit && variable.is_secret}

{#if hasStagedValue} {:else if actingUser?.operator}

Operators cannot load secret value

{:else} {/if} {/if}

{#if isEncryptedDraftValue(variable.value)} (variable.value = '')} /> {:else}

{#snippet children({ item })} {/snippet} {#if editorKind == 'plain'} {:else if editorKind == 'json'}

{#await import('$lib/components/SimpleEditor.svelte')} {:then Module} {/await}

{:else if editorKind == 'yaml'}

{#await import('$lib/components/SimpleEditor.svelte')} {:then Module} {/await}

{/if}