flowplane-secrets

Manage encrypted secrets for Flowplane's Envoy gateway via SDS.

1|Updated Jun 11, 2026

Search Tags:#cli #mcp #encryption #secrets #rest-api #envoy #sds

Ready to run

npx skills add https://github.com/rajeevramani/flowplane --skill flowplane-secrets

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: flowplane-secrets
Source: https://github.com/rajeevramani/flowplane/tree/main/.claude/skills/flowplane-secrets
Command: npx skills add https://github.com/rajeevramani/flowplane --skill flowplane-secrets

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage encrypted secrets for Flowplane's Envoy gateway, enabling secure storage, rotation, and delivery via SDS.

Core Features & Use Cases

Encrypted secret storage and versioned rotation for OAuth2 tokens, TLS certificates, and API keys
Secrets delivered to Envoy over ADS gRPC via SDS, enabling seamless integration with CLI, MCP, and REST workflows
Secret lifecycle management across teams with rotation without reconfiguration of upstream filters

Quick Start

Create a secret using the flowplane secret create workflow to begin managing encrypted credentials in your Envoy gateway.

Frequently Asked Questions about flowplane-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I deliver encrypted secrets to Envoy via SDS?▼

Encrypted secrets are delivered to Envoy via SDS over ADS gRPC, enabling secure storage and rotation for OAuth2 tokens and TLS certificates. You can manage this lifecycle through CLI, MCP, or REST API workflows.

Can I rotate TLS certificates and OAuth2 tokens without reconfiguring Envoy filters?▼

Yes, versioned secret rotation updates TLS certificates and OAuth2 tokens dynamically. Secrets are delivered via SDS, allowing rotation across teams without reconfiguring upstream Envoy filters.

What is the best way to manage Envoy gateway secrets using a REST API?▼

Managing Envoy gateway secrets via a REST API involves creating and rotating encrypted credentials delivered through SDS. This approach supports OAuth2 tokens, TLS certificates, and API keys with robust error handling.

How do I create an encrypted secret for an Envoy gateway using the CLI?▼

Use the secret creation workflow via CLI to begin managing encrypted credentials. This stores secrets for Envoy delivery via SDS, supporting integration with MCP tools and REST APIs.

Does Envoy SDS support integration with external backends for encryption key management?▼

Yes, Envoy SDS integration supports external backend integration for encryption key management. It handles secret types, rotation, and delivery with robust error handling across CLI, MCP, and REST interfaces.