az containerapp job secret

Commands to manage secrets.

Commands

Name	Description	Type	Status
az containerapp job secret list	List the secrets of a container app job.	Core	GA
az containerapp job secret remove	Remove secrets from a container app job.	Core	GA
az containerapp job secret set	Create/update secrets.	Core	GA
az containerapp job secret show	Show details of a secret.	Core	GA

az containerapp job secret list

List the secrets of a container app job.

az containerapp job secret list --name
                                --resource-group
                                [--show-values]

Examples

List the secrets of a container app job.

az containerapp job secret list -n my-containerapp-job -g MyResourceGroup

Required Parameters

--name -n

The name of the container app job for which the secret needs to be retrieved.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--show-values

Show the secret values.

default value: False

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

accepted values: json, jsonc, none, table, tsv, yaml, yamlc

default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az containerapp job secret remove

Remove secrets from a container app job.

az containerapp job secret remove --name
                                  --resource-group
                                  --secret-names
                                  [--yes]

Examples

Remove secrets from a container app job.

az containerapp job secret remove -n my-containerapp-job -g MyResourceGroup --secret-names MySecret MySecret2

Required Parameters

--name -n

The name of the container app job for which the secret needs to be retrieved.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--secret-names

A list of secret(s) for the container app job. Space-separated secret values names.

Optional Parameters

--yes -y

Do not prompt for confirmation.

default value: False

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

accepted values: json, jsonc, none, table, tsv, yaml, yamlc

default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az containerapp job secret set

Create/update secrets.

az containerapp job secret set --name
                               --resource-group
                               --secrets

Examples

Add secrets to a container app job.

az containerapp job secret set -n my-containerapp-job -g MyResourceGroup --secrets MySecretName1=MySecretValue1 MySecretName2=keyvaultref:https://example.vault.azure.net/secrets/mysecret,identityref:/subscriptions/sub/resourceGroups/rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myidentity

Update a secret.

az containerapp job secret set -n my-containerapp-job -g MyResourceGroup --secrets MyExistingSecretName=MyNewSecretValue MyExistingSecretName2=keyvaultref:https://example.vault.azure.net/secrets/mysecret,identityref:/subscriptions/sub/resourceGroups/rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myidentity

Required Parameters

--name -n

The name of the container app job for which the secret needs to be retrieved.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--secrets -s

A list of secret(s) for the container app job. Space-separated values in 'key=value' or 'key=keyvaultref:keyvaulturl,identityref:identity' format (where 'key' cannot be longer than 20 characters).

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

accepted values: json, jsonc, none, table, tsv, yaml, yamlc

default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az containerapp job secret show

Show details of a secret.

az containerapp job secret show --name
                                --resource-group
                                --secret-name

Examples

Show the details of a secret.

az containerapp job secret show -n my-containerapp-job -g MyResourceGroup --secret-name MySecret

Required Parameters

--name -n

The name of the container app job for which the secret needs to be retrieved.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--secret-name

The name of the secret to show.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

accepted values: json, jsonc, none, table, tsv, yaml, yamlc

default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.