docs: manage prod secrets

Author: FlorentRvl

docs/distribution/devops/add_secrets_to_production.md

@@ -12,12 +12,12 @@ The ABI platform supports multiple secret management approaches with a clear pri
 
 Secrets are automatically loaded from NAAS and local files into environment variables at runtime, ensuring seamless access across your application.
 
-## Quick Start (TL;DR)
+## TL;DR
 
 ### Retrieve Secrets from Production
 ```bash
 # Get current production secrets
-./cli secrets naas get-base64-env --naas-api-key='your_naas_api_key'
+./cli secrets naas get-base64-env --naas-api-key='your_naas_api_key' > .env.prod
 ```
 
 ### Push New Secrets to Production
@@ -27,59 +27,7 @@ Secrets are automatically loaded from NAAS and local files into environment vari
 ./cli secrets naas push-env-as-base64 --naas-api-key='your_naas_api_key'
 ```
 
-## Detailed Usage
-
-### Prerequisites
-
-- **NAAS API Key**: Obtain from your NAAS account dashboard
-- **Environment File**: Create or update `.env.prod` with your secrets
-- **CLI Access**: Ensure the `./cli` script is executable
-
-### Available Commands
-
-#### 1. List All Secrets
-View all secrets stored in NAAS without revealing their values:
-
-```bash
-./cli secrets naas list --naas-api-key='your_naas_api_key'
-```
-
-**Options:**
-- `--naas-api-url`: Custom NAAS API URL (default: `https://api.naas.ai`)
-
-#### 2. Retrieve Secrets from NAAS
-Download and display all secrets from the NAAS secret store:
-
-```bash
-./cli secrets naas get-base64-env \
-  --naas-api-key='your_naas_api_key' \
-  --naas-secret-name='abi_secrets' \
-  --naas-api-url='https://api.naas.ai'
-```
-
-**Options:**
-- `--naas-api-key`: Your NAAS API authentication key (required)
-- `--naas-secret-name`: Name of the secret collection (default: `abi_secrets`)
-- `--naas-api-url`: NAAS API endpoint (default: `https://api.naas.ai`)
-
-#### 3. Push Secrets to NAAS
-Upload your local environment file to NAAS as base64-encoded secrets:
-
-```bash
-./cli secrets naas push-env-as-base64 \
-  --naas-api-key='your_naas_api_key' \
-  --env-file='.env.prod' \
-  --naas-secret-name='abi_secrets' \
-  --naas-api-url='https://api.naas.ai'
-```
-
-**Options:**
-- `--naas-api-key`: Your NAAS API authentication key (required)
-- `--env-file`: Path to environment file (default: `.env.prod`)
-- `--naas-secret-name`: Name for the secret collection (default: `abi_secrets`)
-- `--naas-api-url`: NAAS API endpoint (default: `https://api.naas.ai`)
-
-### Environment File Format
+## Environment File Format
 
 Your `.env.prod` file should follow standard environment variable format:
 
@@ -141,45 +89,4 @@ ABI_API_KEY=your_api_key
 - **Backup before changes**: Always retrieve current secrets before pushing updates
 - **Test in staging**: Validate secret changes in non-production environments first
 - **Monitor deployments**: Check application logs after secret updates
-- **Rollback plan**: Keep previous secret versions for quick recovery
-
-## Troubleshooting
-
-### Common Issues
-
-#### Authentication Errors
-```bash
-Error: Unauthorized (401)
-```
-**Solution**: Verify your NAAS API key is correct and has not expired.
-
-#### Secret Not Found
-```bash
-Error: Secret 'abi_secrets' not found
-```
-**Solution**: Use `list` command to see available secrets or create the secret first.
-
-#### Environment File Not Found
-```bash
-Error: File '.env.prod' not found
-```
-**Solution**: Ensure the file exists or specify the correct path with `--env-file`.
-
-#### Network Connectivity
-```bash
-Error: Connection timeout
-```
-**Solution**: Check internet connectivity and verify the NAAS API URL is accessible.
-
-### Getting Help
-
-For additional support:
-1. Check the [NAAS documentation](https://docs.naas.ai)
-2. Review the [ABI deployment guide](../distribution/devops/deploy_api_to_production.md)
-3. Use `./cli secrets --help` for command-specific help
-
-## Related Documentation
-
-- [Deploy API to Production](../distribution/devops/deploy_api_to_production.md)
-- [Add Secrets to Production](../distribution/devops/add_secrets_to_production.md)
-- [Managing Dependencies](manage_dependencies.md)
+- **Rollback plan**: Keep previous secret versions for quick recovery