When I delete a Secret, it seems that it is set to empty string instead of being deleted.
The difference appears, when the same-named variable is in fly.toml. Empty secret overrides fly.toml variable, what is a bug.
Hey @porton,
I’m sorry to hear about that! I was trying to replicate this, and for that I added a new secret to my application, and added the same secret, with a different value to fly.toml. I then deployed the app, and it correctly displayed the secret value in my app, as expected. When I deleted the secret key in the dashboard (and deployed the secrets), it correctly displayed the value set in fly.toml, so I’m unable to replicate the behavior you are experiencing.
Can you share step by step what you did, so I can try to replicate it? And do you mind sharing your app and deployment ID (you can see it on the URL: https://fly.io/apps/[your-app]/deployments/[id]) so I can dig further? Feel free to DM me that info, if you want to keep it private.
As a side note, secrets shouldn’t really be included in the fly.toml file. Although in the end they are all environment variables, having secrets exposed in the config file might lead to unwanted disclosure of that secret.
Sorry, I can’t remember all the details of what I did.
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.