oz0 secret rollback

Bring back a secret's previous value, within 24 hours of the set that replaced it.

For: Operators and developers looking up a command.

Bring back a secret's previous value, within 24 hours of the set that replaced it.

The previous value and the live one swap: every edge's next call uses the restored value, and the value it replaces is kept until the same time, so a second rollback undoes the first. After the 24 hours the previous value is destroyed and the rollback says so. Each rollback is audited (secret.rollback).

A secret that is a reference to a secret store, and whose store changed its value, goes back to the store's previous version instead: the reference is pinned to it (store:<store>/<path>@<version>), and a second rollback unpins it.

Usage

oz0 secret rollback <NAME> [flags]

Flags

FlagTypeDefaultDescription
--reasonstringwhy, for the audit trail

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error
--tenantstringdefaulttenant

See all oz0 commands and the global flags.

On this page
Copyright © 2026