> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xloud.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# Key Manager Quotas

> Manage per-project Key Manager resource limits in Xloud — view and set quotas for secrets, containers, certificate orders, consumers, and CA configurations.

## Overview

Key Manager quotas prevent individual projects from creating excessive secrets,
containers, or orders. Default values are set platform-wide; administrators override
them per project.

<Warning>
  **Administrator Access Required** — This operation requires the `admin` role. Contact your
  Xloud administrator if you do not have sufficient permissions.
</Warning>

***

## Default Quota Reference

| Resource     | Default Limit | Description                                      |
| ------------ | ------------- | ------------------------------------------------ |
| `secrets`    | 20            | Secrets per project                              |
| `orders`     | 20            | Certificate orders per project                   |
| `containers` | 20            | Containers per project                           |
| `consumers`  | 20            | Service consumers per container                  |
| `cas`        | 10            | Certificate Authority configurations per project |

***

## View Quotas

<Tabs>
  <Tab title="Platform defaults" icon="eye">
    ```bash title="Show platform-wide quota defaults" theme={null}
    openstack secret quota show
    ```
  </Tab>

  <Tab title="Project quotas (admin)" icon="shield">
    ```bash title="Show quotas for a specific project" theme={null}
    openstack secret quota show <project-id>
    ```
  </Tab>
</Tabs>

***

## Set Quotas

```bash title="Set project-specific Key Manager quotas" theme={null}
openstack secret quota set \
  --secrets 100 \
  --orders 50 \
  --containers 50 \
  <project-id>
```

```bash title="Reset to platform defaults" theme={null}
openstack secret quota delete <project-id>
```

<Tip>
  Production projects running automated certificate rotation or large service meshes
  may require `secrets` quotas in the hundreds. Monitor usage quarterly to right-size
  quota allocations.
</Tip>

***

## Monitor Quota Usage

```bash title="Count secrets in a project" theme={null}
openstack secret list --project <project-id> | wc -l
```

```bash title="Count containers in a project" theme={null}
openstack secret container list --project <project-id> | wc -l
```

***

## Next Steps

<CardGroup cols={2}>
  <Card title="Security" href="/services/key-manager/security" color="#197560">
    Apply Key Manager security hardening policies
  </Card>

  <Card title="Backend Configuration" href="/services/key-manager/backend-config" color="#197560">
    Configure the underlying secret store backend
  </Card>

  <Card title="Admin Troubleshooting" href="/services/key-manager/admin-troubleshooting" color="#197560">
    Diagnose quota-related errors and service issues
  </Card>

  <Card title="Key Manager User Guide" href="/services/key-manager/user-guide" color="#197560">
    User-facing secret and container management
  </Card>
</CardGroup>