Skip to main content

anycloud secrets

anycloud secrets new <name> KEY=VALUE [KEY=VALUE ...]
anycloud secrets list
anycloud secrets delete <name> [--force]

new creates or replaces a named bundle. list returns names and timestamps, never values.

OptionDescription
-f, --forceDelete even when a non-terminal workload or a Deployment references the name

Without --force, deleting a referenced Secret returns 409 Conflict with the blocking workload and Deployment IDs. Forced deletion does not remove values already injected into a running container, but a future VM start that still references the missing name fails, and a Deployment that references it stops reconciling (see Deployment Secrets).

Inject a Secret by repeating --secret on job, service, vm or deployment create:

anycloud secrets new model-access HF_TOKEN=hf_...

anycloud job IMAGE \
  --secret model-access \
  --secret experiment-tracking

See Secrets & Environment for precedence, rotation, and threat model.