wheels deploy secrets print

Print the fully resolved .kamal/secrets file as KEY=VALUE lines. All $(...) subshells expand.

The documented form is the flat alias wheels deploy print-secrets; wheels deploy secrets print is equivalent. Older CLI runtimes intercepted the nested wheels deploy secrets <verb> form in the top-level secrets command (#2697), which is why the flat aliases exist (#2699). On the current runtime the nested form also reaches deploy dispatch.

Caution

Output is plaintext secrets. Never paste this into logs, tickets, or shared terminals. Run in private.

Synopsis

"

wheels deploy print-secrets [--destination=<name>]

Flags

Flag	Description
--destination=<name>	Overlay .kamal/secrets.<name> on top of .kamal/secrets.

The project root is always the current working directory — run the command from your project. There is no --project-root= flag (the deploy parser never reads one).

Behavior

Uses the internal SecretResolver — the same resolver the deploy flow uses. Every $(...) subshell runs through bash. Missing secrets referenced in deploy.yml do not appear in the output; they’d fail the deploy separately.

Useful to audit what the deploy flow will see before running it.

Example

illustrative

wheels deploy print-secrets
wheels deploy print-secrets --destination=production