{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "Set Instance Secret",
  "description": "Create or update a secret on an instance. The secret value is encrypted at rest and never returned in API responses.",
  "type": "object",
  "required": ["name", "value"],
  "properties": {
    "name": {
      "type": "string",
      "title": "Secret Name",
      "description": "The secret name, as defined in the bundle's massdriver.yaml",
      "examples": ["DATABASE_PASSWORD", "API_KEY"]
    },
    "value": {
      "type": "string",
      "title": "Secret Value",
      "description": "The secret value. Will be encrypted at rest.",
      "examples": ["s3cr3t-v4lu3"]
    }
  }
}
