oz0 audit key rotate
Retire the live audit key and make a new one at once, or with --gateway retire the gateway keys: each edge makes a new one within minutes.
For: Operators and developers looking up a command.
Retire the live audit key and make a new one at once, or with --gateway retire the gateway keys: each edge makes a new one within minutes. Cluster admins may; it is audited (audit.key.rotated). Retired keys keep their public half, so what they signed still verifies.
Usage
oz0 audit key rotate [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--gateway | bool | retire the gateway keys instead of the audit key | |
--json | bool | print JSON instead of a table |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.