wheels deploy secrets print

Print the fully resolved .kamal/secrets file as KEY=VALUE lines. All $(...) subshells expand.

Invoke it through the flat alias wheels deploy print-secrets — the nested wheels deploy secrets print form is shadowed at the shell by the CLI’s own secrets command (#2697, #2699).

Caution

Output is plaintext secrets. Never paste this into logs, tickets, or shared terminals. Run in private.

Synopsis

wheels deploy print-secrets [--destination=<name>]

Flags

Flag	Description
--destination=<name>	Overlay .kamal/secrets.<name> on top of .kamal/secrets.

The project root is always the current working directory — run the command from your project. There is no --project-root= flag (the deploy parser never reads one).

Behavior

Uses the internal SecretResolver — the same resolver the deploy flow uses. Every $(...) subshell runs through bash. Missing secrets referenced in deploy.yml do not appear in the output; they’d fail the deploy separately.

Useful to audit what the deploy flow will see before running it.

Example

illustrative

wheels deploy print-secrets
wheels deploy print-secrets --destination=production