Delete a secret

Delete a secret when you no longer need its store. Deleting removes the store and every value in it. Its address stops working, and billing for the secret stops.

Before you begin

Make sure that:

• The secret shows Running or Error. Delete is available only then, so if it is Creating or Upgrading, wait for it to finish.
• You have permission to delete secrets in the project. An Admin or a Project Lead can always delete secrets; any other user needs a policy set that allows it. MyAccount displays Delete to users who have permission to delete secrets. See Create a policy set.
• Any value you still need is copied out of the store, with bao kv get or your own tools. See Connect to a secret.
• Your applications no longer read from the store’s address.

Delete the secret

Deleting a secret cannot be undone. It removes the store and every value in it.

1. In the MyAccount side menu, click E2E Secrets Management.
2. In the secret’s row, open Actions and choose Delete. The Delete Secret dialog opens.
3. Turn on I understand that this will permanently delete, which ends with the secret’s name. Secret Name appears.
4. In Secret Name, type the secret’s name exactly as it is listed. Delete is available when the name matches.
5. Click Delete.

MyAccount confirms with Secret Management deleted successfully. The secret shows Deleting, then leaves the list. The account owner gets an email when it is gone.

To set up a fresh store later, follow Get started with E2E Secrets Management. For help when Delete is missing, see Upgrade or Delete is missing.