Add a secret to the project

• Add a secret to the project.
  • If the secret key already exists, then it will be replaced by the new one.
  • If the secret value points toward an existing secret key, it will be considered as an alias.

POST /project/{projectId}/secret

Add a secret to the project

cURL

curl --request POST \
  --url https://api.qovery.com/project/{projectId}/secret \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "key": "<string>",
  "value": "<string>",
  "mount_path": null,
  "description": "<string>",
  "enable_interpolation_in_file": true
}
'

201

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "created_at": "2023-11-07T05:31:56Z",
  "key": "<string>",
  "updated_at": "2023-11-07T05:31:56Z",
  "overridden_secret": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "key": "<string>",
    "mount_path": "<string>",
    "description": "<string>",
    "enable_interpolation_in_file": true
  },
  "aliased_secret": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "key": "QOVERY_DATABASE_PSQL_NAME",
    "mount_path": "<string>",
    "description": "<string>",
    "enable_interpolation_in_file": true
  },
  "service_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "service_name": "<string>",
  "owned_by": "<string>",
  "description": "<string>",
  "enable_interpolation_in_file": true
}

Authorizations

bearerAuthApiKeyAuth

Authorization · string · header · required

JWT tokens should be used with OIDC account (human to machine). JWT tokens used by the Qovery console to communicate with the API have a TTL. Curl Example ' curl https://console.qovery.com/organization -H "Authorization: Bearer $qovery_token" '

Path Parameters

projectId · string<uuid> · required

Project ID

Body

application/json

key · string · required

key is case sensitive

value · string

value of the secret. Clear value will never be returned

mount_path · string | null

should be set for file only. variable mount path make secret a file (where file should be mounted).

description · string | null

optional variable description (255 character maximum)

Maximum string length: 255

enable_interpolation_in_file · boolean | null

Response

201

application/json

Added a secret

id · string<uuid> · required · read-only

created_at · string<date-time> · required · read-only

key · string · required

key is case sensitive

scope · enum<string> · required

Available options: APPLICATION, BUILT_IN, ENVIRONMENT, PROJECT, CONTAINER, JOB, HELM, TERRAFORM

updated_at · string<date-time> · read-only

overridden_secret · object

Show child attributes

aliased_secret · object

Show child attributes

variable_type · enum<string>

type of the environment variable (VALUE, FILE, ALIAS, OVERRIDE, BUIT_IN, EXTERNAL_SECRET)

Available options: VALUE, ALIAS, OVERRIDE, BUILT_IN, FILE, EXTERNAL_SECRET

service_id · string<uuid>

service_name · string

service_type · enum<string>

type of the service (application, database, job, gateway...)

Available options: APPLICATION, CONTAINER, DATABASE, JOB, HELM, TERRAFORM

owned_by · string

Entity that created/own the variable (i.e: Qovery, Doppler)

description · string | null

optional variable description (255 characters maximum)

Maximum string length: 255

enable_interpolation_in_file · boolean | null