Northflank

Sync an environment into a Northflank project secret group.

Connection

What	This provider
Vendor	Northflank
Key	`northflank-project-secret`
Availability	`available`. You can connect it today.
Credential we hold	`northflank-token`
Values read back	yes
Activation	`restart-on-write`

Direction	What it does
`import`	We read names and values out of the store into your environment.
`export`	We write names and values from your environment into the store.

restart-on-write. When we write a value, the workload restarts.

Direction	Policies you can pick
`import`	`skip_existing`, `new_version`, `fail`
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

Paste a credential from the vendor. We seal it and never show it again.

Field	Label	Kind	Required	What it is
`token`	API token	secret; we mask it here and seal it	yes	An API token with project:read and secret:read, plus secret:write to export.

You answer these once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`projectId`	Project	text	yes	no	The ID in your Northflank project URL.
`secretGroupId`	Secret group	text	yes	no	Give us a group of our own. A concurrent edit here can be overwritten.

We probe for these when we verify the connection.

Permission	Directions	Blocking	Without it
`project:read`	every direction	yes	We cannot see the project at all.
`secret:read`	`import`	yes	Import cannot read values.
`secret:write`	`export`	yes	Export cannot write anything.