Skip to content

Env and secrets

Manage runtime environment variables. Changes trigger a rolling restart.

Terminal window
grid env <subcommand>
Subcommand Usage Description
list grid env list [name] List all env vars for a runtime.
get grid env get <key> [name] Print the value of one env var.
set grid env set [name] KEY=VAL [KEY2=VAL2...] Set one or more env vars (admin only).
unset grid env unset [name] KEY [KEY2...] Remove env vars (admin only).

Inside a linked directory the entity name is optional. Outside, provide the slug as the first argument.

Terminal window
grid env list # list vars for the linked entity
grid env set API_KEY=abc123 # set a var
grid env set my-app DATABASE_URL=mongo:// # set a var for a named entity
grid env unset LEGACY_FLAG # remove a var

Some keys are reserved and injected by the platform (for example PORT, DATABASE_MONGODB_URL, and any CLOUDGRID_* key). See Infrastructure needs for the reserved list.

Manage runtime secrets. Values are never returned to the CLI after being set.

Terminal window
grid secrets <subcommand>
Subcommand Usage Description
list grid secrets list [name] List secret keys (values never leave the cluster).
get grid secrets get <key> [name] Confirm a secret key exists (the value is not returned).
set grid secrets set [name] KEY=VAL [KEY2=VAL2...] Set one or more secrets (admin only).
unset grid secrets unset [name] KEY [KEY2...] Remove secrets (admin only).

Same in-folder / out-of-folder resolution as grid env.

Terminal window
grid secrets set my-app API_KEY=sk-abc123 STRIPE_KEY=sk_live_xyz
grid secrets list my-app # keys only, not values
grid secrets unset my-app API_KEY