Gyro Containers: environment variables and secrets (passwords, API keys)

1. Variable or secret?

Rules: A variable name consists of letters, digits and _. Names starting with GYRO_ and other prefixes reserved by the platform cannot be used; the panel then says "Invalid variable name/value".

2. Editing environment variables

1. Open Services in your environment and click your service.
2. In the Environment variables section press Edit.
3. Write KEY=VALUE on each line. Anything not in the list is deleted; the list represents the full set.
4. Press Save. The message "Variables saved, the service is restarting." appears.

A variable change creates a new revision and the service restarts in turn without downtime. If you roll back, the variables return to their old values.

# Add/update on top of existing ones
gyro container env set 12345 api --data '{"set":{"MODE":"prod","LOG_LEVEL":"info"}}'
# Remove a variable
gyro container env set 12345 api --unset LOG_LEVEL
# Replace the whole set with this list
gyro container env set 12345 api --replace 1 --data '{"set":{"MODE":"prod"}}'

3. Adding and deleting secrets

1. On the service page press Add in the Secrets section.
2. Enter a Name (for example DB_PASSWORD) and a Value and save. You see "Secret saved, the service is restarting."
3. The value is stored encrypted; the panel and API show only the name. To change a value save it again under the same name.
4. To delete, use the delete button next to the name ("Delete {name}? The service restarts").

# Use stdin so the value does not end up in your shell history
echo '{"set":{"DB_PASSWORD":"very-secret"}}' | gyro container secret set 12345 api --data @-
gyro container secret delete 12345 api --keys DB_PASSWORD

4. Using them in your application

Both kinds reach your application as environment variables:

import os
db_password = os.environ["DB_PASSWORD"]   # secret
mode = os.environ.get("MODE", "dev")      # variable

5. Frequently asked questions