Skip to content

cub serviceaccount key delete

cub serviceaccount key delete

Remove a public key from a service account

Synopsis

Remove one of a service account's public keys, by its thumbprint.

Whatever holds that private key stops being able to authenticate; the service account's other keys keep working. To rotate without an outage, add the new key first, move whatever uses the old one over, confirm the new key's Last-Used is moving, and only then delete the old one.

Examples: 

  cub serviceaccount key delete deploy-bot NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs

cub serviceaccount key delete <service account> <kid> [flags]

Options

  -h, --help   help for delete

Options inherited from parent commands

      --context string   The context to use for this command
      --debug            Debug output

SEE ALSO