oz0 secret delete

Delete a tenant secret.

For: Operators and developers looking up a command.

Delete a tenant secret. The deletion is refused while plugins, providers, bindings, connections or routines use it, and the refusal lists them (oz0 secret dependents shows the same); --force with a --reason deletes it anyway, and the audit log keeps the list.

Usage

oz0 secret delete <NAME> [flags]

Flags

FlagTypeDefaultDescription
--forcebooldelete it although something uses it (takes --reason)
--reasonstringwhy a forced deletion goes past what uses it (at most 500 characters; default $OZ0_REASON)

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error
--tenantstringdefaulttenant

See all oz0 commands and the global flags.

On this page
Copyright © 2026