oz0 server operator disable

Disable an operator: the admin API refuses its certificates at once and every edge within seconds, and none is renewed or issued for it until `server operator enable`.

For: Operators and developers looking up a command.

Disable an operator: the admin API refuses its certificates at once and every edge within seconds, and none is renewed or issued for it until server operator enable. It runs on a server's machine and needs the database, not the master key. The audit log records it.

Usage

oz0 server operator disable NAME [flags]

Flags

FlagTypeDefaultDescription
--data-dirstring~/.local/share/orchestrator-zeroserver data directory
--db-filefilea file (- for stdin) holding the PostgreSQL URL of the management database, such as postgres://oz0:PASSWORD@db:5432/oz0 (or set OZ0_DB); the URL can carry a password, so it never goes on the command line
--devboola dev server's data directory (--data-dir) instead of a cluster's database

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026