Changelog

Secret Manager v1 API is deprecated

The Secret Manager v1 API will be removed on 2026-09-30. Migrate to v2 before then to avoid disruption.

What’s different in v2

• Versioned secrets with rollback
• Per-field encryption metadata
• KMS-backed encryption keys (BYOK supported)
• Faster reads (~3× lower p99 latency)

Migration

$
ibee secret migrate v1-to-v2 --project <id> --dry-run
$
ibee secret migrate v1-to-v2 --project <id> --apply

The migration is idempotent and rollback-safe. Audit logs record each migrated secret.

v1 → v2 migration guide →