oz0 tenant oidc jwks

Prints the JWK Set of the tenant's issuer as its edge serves it: the previous, the current and the next public key.

For: Operators and developers looking up a command.

Prints the JWK Set of the tenant's issuer as its edge serves it: the previous, the current and the next public key. Clouds that cannot fetch the issuer's discovery document over the internet, such as a Google Cloud workload identity pool provider, take this file as an upload. Upload it again after every rotation, before the next one.

Usage

oz0 tenant oidc jwks <tenant> [flags]

Flags

FlagTypeDefaultDescription
--fromstringthe CLI context's edge APIthe edge to read the key set from, https://<edge>:<port>

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026