# RadiusSecretStoreResource

- Kind: `class`
- Package: [Aspire.Hosting.Radius](/reference/api/csharp/aspire.hosting.radius.md)
- Version: `13.6.0-preview.1.26478.8`
- Namespace: `Aspire.Hosting.Radius`
- Target framework: `net10.0`
- Source: [GitHub](https://github.com/microsoft/aspire/blob/f4c27f2d43ddc1cacd0dd083b30d1fea1cee7a62/src/Aspire.Hosting.Radius/Secrets/RadiusSecretStoreResource.cs)
- Inherits: `Resource`

Represents a Radius `Applications.Core/secretStores@2023-10-01-preview` resource in the Aspire app model. Referenceable by consumers (recipe-config auth) via its fully-qualified UCP secret-store ID. Declared via `builder.AddRadiusSecretStore(...)` (application-scoped) or `radius.WithSecretStore(...)` (environment-scoped).

## Definition

```csharp
namespace Aspire.Hosting.Radius;

public sealed class RadiusSecretStoreResource
    : Aspire.Hosting.ApplicationModel.Resource
{
    // ...
}
```

## Properties

- [MaterializationTimeout](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreresource/properties.md#materializationtimeout) : `TimeSpan` `get` -- The bounded time to wait for a sealed `Secret` to materialize in-cluster before `rad deploy`. Default 120s; overridable via `WithMaterializationTimeout`. Bounds the whole apply→sync-poll→key-verify sequence (a single shared budget), so a stalled `kubectl` apply or verify call is cancelled once it is exhausted. Used only by the sealed-secrets deploy path (see [RadiusSecretStoreResource.MaterializationTimeoutWasSet](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreresource/properties.md)).
- [Type](/reference/api/csharp/aspire.hosting.radius/radiussecretstoreresource/properties.md#type) : [RadiusSecretStoreType](/reference/api/csharp/aspire.hosting.radius/radiussecretstoretype.md) `get` -- The Radius secret-store type (drives required-key validation and encoding defaults).