# RadiusSecretStoreConsumerExtensions

- Kind: `class`
- Package: [Aspire.Hosting.Radius](/reference/api/csharp/aspire.hosting.radius.md)
- Version: `13.6.0-preview.1.26478.8`
- Namespace: `Aspire.Hosting`
- Target framework: `net10.0`
- Source: [GitHub](https://github.com/microsoft/aspire/blob/f4c27f2d43ddc1cacd0dd083b30d1fea1cee7a62/src/Aspire.Hosting.Radius/Secrets/RadiusSecretStoreConsumerExtensions.cs)

Fluent entry points for consuming a declared Radius secret store from its documented Radius consumers (environment `recipeConfig` authentication / `envSecrets`). Each reference is emitted by the store's fully-qualified UCP secret-store ID ( `/planes/radius/local/resourceGroups/<group>/providers/Applications.Core/secretStores/<name>`). All surface is experimental and gated by `ASPIRERADIUS006`.

## Definition

```csharp
namespace Aspire.Hosting;

public static class RadiusSecretStoreConsumerExtensions
{
    // ...
}
```

## Methods

- [WithBicepRegistryAuthentication(IResourceBuilder<RadiusEnvironmentResource>, string, IResourceBuilder<RadiusSecretStoreResource>)](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreconsumerextensions/methods.md#withbicepregistryauthentication-iresourcebuilder-radiusenvironmentresource-string-iresourcebuilder-radiussecretstoreresource) : `IResourceBuilder<RadiusEnvironmentResource>` `extension` `experimental` `ats ignored` -- Uses a `basicAuthentication` store as private Bicep-registry auth in `recipeConfig`.
- [WithRecipeEnvironmentSecret(IResourceBuilder<RadiusEnvironmentResource>, string, IResourceBuilder<RadiusSecretStoreResource>, string)](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreconsumerextensions/methods.md#withrecipeenvironmentsecret-iresourcebuilder-radiusenvironmentresource-string-iresourcebuilder-radiussecretstoreresource-string) : `IResourceBuilder<RadiusEnvironmentResource>` `extension` `experimental` `ats ignored` -- Adds a `recipeConfig.envSecrets['<VAR>'] = { source: <storeId>, key: <k> }` entry.
- [WithTerraformGitAuthentication(IResourceBuilder<RadiusEnvironmentResource>, string, IResourceBuilder<RadiusSecretStoreResource>)](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreconsumerextensions/methods.md#withterraformgitauthentication-iresourcebuilder-radiusenvironmentresource-string-iresourcebuilder-radiussecretstoreresource) : `IResourceBuilder<RadiusEnvironmentResource>` `extension` `experimental` `ats ignored` -- Uses a store exposing a `pat` key (optionally `username`) as a Terraform Git PAT in `recipeConfig`.