Skip to content

cub user key

cub user key

Manage the public keys registered against an identity

Synopsis

Manage the public keys an identity can authenticate with.

The holder of the matching private key authenticates by signing a short-lived assertion, so ConfigHub never receives or stores a secret. This replaces the worker secret, which ConfigHub generates, stores, returns through the API, and receives again on every token refresh.

Identities are named one of two ways. Use --worker to name a worker and have it resolved to the bot user it runs as, which is what an operator usually wants; use --user to name an identity directly.

Registering a key hands out an identity: whoever holds the private key authenticates as that identity from then on. It requires the admin or manager role, and you cannot register a key for yourself.

Options

  -h, --help            help for key
      --space string    space ID to perform command on
      --user string     identity to manage keys for, by username or UUID
      --worker string   worker whose bot user to manage keys for, by slug or UUID

Options inherited from parent commands

      --context string   The context to use for this command
      --debug            Debug output

SEE ALSO