cub user key delete

cub user key delete

Remove a public key from an identity

Synopsis

Remove one registered public key, by its thumbprint.

This is the second half of rotation and the response to a private key you no longer trust. Whatever holds that private key stops being able to authenticate; anything else the identity has registered keeps working.

To rotate without an outage, add the new key first, restart whatever uses it, confirm the new key's Last-Used is moving, and only then delete the old one.

Examples:

  # Retire a key by thumbprint
  cub user key delete --worker my-worker NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs

cub user key delete <kid> [flags]

Options

  -h, --help   help for delete

Options inherited from parent commands

      --component string   the Component of --variant, when that names the variant alone; --variant <component>/<variant> says the same in one flag
      --context string     The context to use for this command
      --debug              Debug output
      --space string       space to operate in, by slug or UUID. Omitted, a list or bulk operation spans the organization and a single entity is named as <space>/<slug>
      --user string        identity to manage keys for, by username or UUID
      --variant string     variant to operate in, as <component>/<variant>, or as <variant> with --component: the space naming that Component whose Variant label is <variant>. The same scope as --space, named by what it is rather than by the space's slug; the two cannot be combined
      --worker string      worker whose bot user to manage keys for, by slug or UUID

SEE ALSO

• cub user key - Manage the public keys registered against an identity