Skip to main content

astroctl integrations vault

List, inspect and revoke the credentials the organization has given AstroPulse

Synopsis​

List the credentials the organization has given AstroPulse (a Hugging Face token, a registry login, a self-hosted cluster's cloud credentials), inspect one, revoke one, and replace a self-hosted cluster's key with a new one. Credentials themselves are never shown.

Every member of the organization can list them (a service account's key cannot): what each one is for, its cluster, its state and when it was last checked. An organization owner or admin also sees who stored each one, and can inspect, revoke and replace them.

Terminal
astroctl integrations vault [flags]

Examples​

Terminal

# List them
astroctl integrations vault list

# Only one cluster's, or one kind
astroctl integrations vault list --cluster prod
astroctl integrations vault list --kind huggingface --kind registry

# Show each one's lease ID (get and revoke take it)
astroctl integrations vault list -o yaml

# Inspect one
astroctl integrations vault get 5891b549-771f-4b2a-99c7-727ccf69f87c

# Revoke one (asks you to type its name; --yes skips the question)
astroctl integrations vault revoke 5891b549-771f-4b2a-99c7-727ccf69f87c

# Replace a self-hosted cluster's key with a new one from an AWS CLI profile
astroctl integrations vault replace 5891b549-771f-4b2a-99c7-727ccf69f87c --profile prod-rotated

Options​

Terminal
  -h, --help   help for vault

Options inherited from parent commands​

Terminal
  -o, --output string   Output format (table|json|yaml) (default "table")

SEE ALSO​