doctl harness-runtime triggers rotate-secret
Generated on 6 Oct 2026
from doctl version
v1.178.0
Usage
doctl harness-runtime triggers rotate-secret <trigger-id> [flags]Description
Issue a new webhook secret (shown once). Webhook triggers only. By default the old secret keeps verifying deliveries for 5 minutes, so deliveries already in flight still succeed while you paste the new secret into your external system. Pass --grace-period 0 to retire the old secret immediately — deliveries still signed with it start failing at once, so use it when the old secret is compromised. Pass a positive value (seconds, up to the server max of 1 hour) for a custom handoff window.
Flags
| Option | Description |
|---|---|
--grace-period |
Seconds the old secret keeps verifying (omit for 5m default; 0 revokes immediately; max 1h). Use 0 when the old secret is compromised. Default: 0 |
--help, -h |
Help for this command |
Related Commands
| Command | Description |
|---|---|
| doctl harness-runtime triggers | Manage webhook and cron triggers for hosted agent runs |
Global Flags
| Option | Description |
|---|---|
--access-token, -t |
API V2 access token |
--api-url, -u |
Override default API endpoint |
--config, -c |
Specify a custom config file Default: |
--context |
Specify a custom authentication context name |
--http-retry-max |
Set maximum number of retries for requests that fail with a 429 or 500-level error
Default: 5 |
--http-retry-wait-max |
Set the minimum number of seconds to wait before retrying a failed request
Default: 30 |
--http-retry-wait-min |
Set the maximum number of seconds to wait before retrying a failed request
Default: 1 |
--interactive |
Enable interactive behavior. Defaults to true if the terminal supports it (default false)
Default: false |
--output, -o |
Desired output format [text|json] Default: text |
--trace |
Show a log of network activity while performing a command Default: false |
--verbose, -v |
Enable verbose output Default: false |