Skip to main content

secrets

manage a service's secret overrides

🔒 Manage a service's secret overrides in an environment.

These override the environment's secret baseline for this service's deployment in the given environment. For a key the service sets, the override wins; otherwise the environment value is inherited.

Secret values are write-only: list shows only the key names, never the values.

The service is resolved from --service (or the COMPUTESPHERE_SERVICE_ID env var), and the environment from --environment or your default (csph environment use <id>). Together they resolve the service's deployment in that environment.

The override set is stored as a whole and values can never be read back — so set requires you to supply every existing key as well (or pass --replace to set exactly the given secrets and drop the rest). The service's variable overrides are left untouched.

Subcommands​

CommandDescription
setset one or more secret overrides
listlist a service's secret override names (values are never shown)

See also​