oz0 secret expiry
Set when a secret should be rotated: a date (2026-12-31), a period (90d, 12w) or none.
For: Operators and developers looking up a command.
Set when a secret should be rotated: a date (2026-12-31), a period (90d, 12w) or none.
A period counts from the value's last set, and every set moves it on. Reminders go out before the date (oz0 secret reminders), and a secret past it is a finding of oz0 doctor (secret_overdue). The secret keeps working: its provider decides when a key stops. The value, its version and its age stay as they are; the change is audited (secret.expiry).
Usage
oz0 secret expiry <NAME> <date|duration|none> [flags]
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
--tenant | string | default | tenant |
See all oz0 commands and the global flags.