cub user key delete

cub user key delete

Remove a public key from an identity

Synopsis

Remove one registered public key, by its thumbprint.

This is the second half of rotation and the response to a private key you no longer trust. Whatever holds that private key stops being able to authenticate; anything else the identity has registered keeps working.

To rotate without an outage, add the new key first, restart whatever uses it, confirm the new key's Last-Used is moving, and only then delete the old one.

Examples:

  # Retire a key by thumbprint
  cub user key delete --worker my-worker NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs

cub user key delete <kid> [flags]

Options

  -h, --help   help for delete

Options inherited from parent commands

      --context string   The context to use for this command
      --debug            Debug output
      --space string     space ID to perform command on
      --user string      identity to manage keys for, by username or UUID
      --worker string    worker whose bot user to manage keys for, by slug or UUID

SEE ALSO

• cub user key - Manage the public keys registered against an identity