hooks:secrets:update
Replace a hook secret's value and bump its `version`. The old value cannot be retrieved afterwards. Needs write access to the owner node.
Reference for flywheel hooks:secrets:update.
Command Group
Hooks Commands
Summary
Replace a hook secret's value and bump its version. The old value cannot be retrieved afterwards. Needs write access to the owner node.
Effect
DESTRUCTIVE: deletes, overwrites or revokes something
Usage
flywheel hooks:secrets:update <FLAGS>Required flags
| Flag | Value | Default | Choices | Description |
|---|---|---|---|---|
--owner_node_id | string | Node owning the hooks and secrets: any node_id, or owner_node_id in hook results. Missing or hidden: 404. Listing hooks or runs needs read access; changes and secret listing need write access (else 403). | ||
--secret_id | string | Secret on owner_node_id, from secret_id in hooks:secrets:list or the create result. Unknown or on another owner node: 404. | ||
--value | string | New value (non-blank) replacing the old one; the old value cannot be retrieved afterwards. |
Optional flags
| Flag | Value | Default | Choices | Description |
|---|---|---|---|---|
--format | FORMAT | json, tsv, csv, table | Output format for command results. | |
--env | PROFILE | Select a CLI profile; unconfigured default requires FLYWHEEL_BASE_URL. | ||
--out | PATH | Write output to a file path, or use - for stdout. | ||
--open | Open browser-bound URLs when supported. | |||
--no-retry | Disable transient-error retries. | |||
--retry-max | N | Maximum transient-error retry attempts. | ||
--wait | Block on async operations until a terminal state is reached. | |||
--wait-timeout | SECONDS | 600 | Seconds to wait for --wait before timing out. Defaults to 600. | |
--allow-self | Allow mutating the currently active credential. | |||
--timeout | SECONDS | Set the per-request timeout budget in seconds. | ||
--idempotency-key | KEY | Reuse an Idempotency-Key so ambiguous write failures can be retried with the same key. | ||
--force | Force safety-gated operations where supported. | |||
--yes | Confirm forced compute:release-all --force. Other runtime commands do not read --yes. | |||
--debug | Print structured request debugging with secrets masked. | |||
--verbose | Print verbose progress for long-running operations. | |||
-h, --help | Show this help. |
Examples
Rotate one hook secret.
flywheel hooks:secrets:update --owner_node_id n_owner --secret_id hs_1 --value rotatedOutput
Default format: json.
| Field | Type |
|---|---|
secret | object |
hooks:secrets:list
List hook secret metadata for an owner node (`secret_id`, `name`, `version`, timestamps). Never returns secret values. Needs write access to the node, not just read access.
hooks:set-enabled
Enable or disable one hook. A disabled hook is kept but queues no new runs, and a run of it that is still queued when the worker picks it up does not start: it ends as `canceled`, with an error message that names the hook. Runs already running are not interrupted. Enabling again does not revive a canceled run; the next matching event queues a new one. The run history stays. Needs write access to the owner node.