uplim.api.v1.IntegrationSecretsService
postDelete Integration Secret
Deletes the named secret from the integration. Deleting a name that isn't set succeeds as a no-op. An `unbind` audit-log row is appended (best-effort). Returns `NotFound` for an unknown integration. **Access:** any authenticated caller who owns the integration's OAuth client (or, when the client belongs to an application, is a member of that application), or a token with the `upl:admin` scope. System integrations require `upl:admin`.
postList Integration Secrets
Lists the names and last-updated timestamps of the integration's secrets, sorted by name. Values (plaintext or ciphertext) are never returned. Returns `NotFound` for an unknown integration. **Access:** any authenticated caller who owns the integration's OAuth client (or, when the client belongs to an application, is a member of that application), or a token with the `upl:admin` scope. System integrations require `upl:admin`.
postSet Integration Secret
Creates or overwrites (upsert by name) a secret on the integration. The plaintext value is encrypted with the pipeline's active RSA-OAEP (SHA-256) public key before storage and is never returned by any read. The value is encrypted in a single RSA-OAEP block, so values larger than the configured key allows fail with `Internal`. Returns `FailedPrecondition` when no public key is configured, `NotFound` for an unknown integration. A `bind` audit-log row is appended (best-effort). **Access:** any authenticated caller who owns the integration's OAuth client (or, when the client belongs to an application, is a member of that application), or a token with the `upl:admin` scope. System integrations require `upl:admin`.