Skip to main content

anycloud secrets

anycloud secrets new <name> KEY=VALUE [KEY=VALUE ...]
anycloud secrets list
anycloud secrets delete <name> [--force]

new creates or replaces a named bundle. list returns names and timestamps, never values.

OptionDescription
-f, --forceDelete even when a non-terminal deployment references the name

Without --force, deleting a referenced Secret returns 409 Conflict with the blocking deployment IDs. Forced deletion does not remove values already injected into a running container, but a future VM start that still references the missing name fails.

Inject a Secret by repeating --secret on submit or serve:

anycloud secrets new model-access HF_TOKEN=hf_...

anycloud submit IMAGE \
  --secret model-access \
  --secret experiment-tracking

See Secrets & Environment for precedence, rotation, and threat model.