setSecrets via graphql

Now that I’ve got basic app deployment via terraform working, I’m trying to get secrets working.

Is this intended to be a way to set all the secrets of an app? Or just add/set some of them?

We just pushed a small change. The setSecrets mutation is, by default, additive. There’s now a replaceAll field you can set to true to use it to set all secrets in one shot (and unset anything that’s not in your API call).