DigitalOcean App Platform

Export secrets into a DigitalOcean app.

The connection

What	This provider
Vendor	DigitalOcean
Key	`digitalocean-app`
Availability	`available`. You can connect it today.
Credential penv holds	`digitalocean-token`
Values read back	no
Activation	`restart-on-write`

Direction	What it does
`export`	Writes names and values from penv into the store.

DigitalOcean returns no value once it holds one, so penv can write here and cannot read back.

restart-on-write. Writing a value restarts the workload.

Direction	Policies you can pick
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

You paste a credential you already hold. penv seals it and never shows it again.

Field	Label	Kind	Required	What it is
`token`	Access token	secret, masked here and sealed	yes

Answered once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`appId`	App	text	yes	no	The app whose variables this environment maps onto. Its dashboard URL ends with the id.
`component`	Component	text	no	yes	Leave empty for the app-wide variables. A component's own override those.

penv probes for these when it verifies the connection.

Permission	Directions	Blocking	Without it
`app:read`	every direction	yes	Preview cannot list the app's variable names.
`app:update`	`export`	yes	Export cannot write anything.