Apply Application Env Secrets

Apply the application’s stored environment secrets to what is already running: re-seal them into the Secrets the manifests read on every deployment and roll the workloads that read them. An application whose last key has been cleared applies too, and the apply then removes the sealed Secret from the deployment’s stack and rolls the workloads off those values - without it, every reconcile put the deleted values back. The values only reach a running workload at deploy time otherwise, so this is the explicit one-click close of that gap - it is never triggered implicitly by setting a value. It takes no body (the values it applies are the ones already stored) and returns none. The deploy parameters of each deployment are left untouched: only the environment-secret manifest and the pod templates that read it are written. A browser session twin is mounted at the same path without the /api/v1 prefix (cookie authentication plus the X-Ankra-CSRF double-submit header).

POST /api/v1/org/applications/{application_id}/env-secrets/apply

Apply Application Env Secrets

Python

import requests

url = "https://platform.ankra.app/api/v1/org/applications/{application_id}/env-secrets/apply"

headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, headers=headers)

print(response.text)

200

{
  "revision": "<string>",
  "applied_count": 123,
  "skipped_count": 123,
  "failed_count": 123,
  "deployments": [
    {
      "installation_id": "<string>",
      "cluster_id": "<string>",
      "namespace": "<string>",
      "status": "applied",
      "message": "<string>",
      "rolled_workloads": 123
    }
  ]
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

authorization · string | null

x-ankra-organisation-id · string | null

Path Parameters

application_id · string · required

Response

200

application/json

Successful Response

The result of re-sealing an application's stored environment secrets into every deployment of it. No stored value appears in this model - the surface has no route that returns one.

revision · string · required

The catalogue revision this apply sealed.

applied_count · integer · required

skipped_count · integer · required

failed_count · integer · required

deployments · ApplyApplicationEnvSecretOutcome · object[] · required

Show child attributes