cub worker key delete
cub worker key delete
Remove a public key from a worker
Synopsis
Remove one registered public key, by its thumbprint.
This is the second half of rotation and the response to a private key you no longer trust. Whatever holds that private key stops being able to authenticate; anything else the worker has registered keeps working.
To rotate without an outage, add the new key first, restart whatever uses it, confirm the new key's Last-Used is moving, and only then delete the old one.
Examples:
cub worker key delete my-worker NzbLsXh8uDCcd-6MNwXF4W_7noWXFZAfHkxZsRGC9Xs
cub worker key delete <worker> <kid> [flags]
Options
-h, --help help for delete
Options inherited from parent commands
--context string The context to use for this command
--debug Debug output
--space string space ID to perform command on
SEE ALSO
- cub worker key - Manage the keys a worker authenticates with