oz0 tenant encryption
Usage and flags for oz0 tenant encryption.
For: Operators and developers looking up a command.
Show a tenant's encryption status: whether every edge encrypts its payloads before they reach Temporal, its Temporal backend's kind, its payload key's age and retired keys, how Temporal's UIs decode its payloads, its data subjects' keys (counts only), the audit and gateway keys' ages, and for the cluster where the master key and the secrets key come from, whether their offline copies are confirmed and whether the newest backup holds the tenant's payload keys.
Each line that is not as it should be says what to do. The tenant's readers may; key IDs, key command holders, server names and who confirmed what are shown to cluster admins only.
Usage
oz0 tenant encryption <tenant> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--json | bool | print JSON instead of a table |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.