Skip to content

stratumctl admin services

Switch managed services (db, k8s, client-vpn, backup, s3, secrets, security) on or off

Terminal window
stratumctl admin services [flags]

The service registry: every Stratum service, whether this install offers it, and whether it is on. Only managed services can be switched; a service the platform itself runs on is always on.

A service still in use cannot be switched off. “teardown” lists every live resource that switching it off would delete, asks for confirmation, deletes them, and switches the service off once none are left.

Prerequisites hold both ways: db requires s3 and secrets, so neither can be switched off while db is on, and db cannot be switched on while either is off.

Stop a teardown that cannot finish; the service stays on

Terminal window
stratumctl admin services cancel-teardown <key> [flags]

Stop a running teardown (a final snapshot that keeps failing, a resource that became blocked). The service stays on and tenants get it back. Deletes already issued are NOT undone.

Terminal window
stratumctl admin services cancel-teardown db

Switch a service off (refused while tenants still use it; see teardown)

Terminal window
stratumctl admin services disable <key> [flags]
Terminal window
stratumctl admin services disable db

Switch a service on

Terminal window
stratumctl admin services enable <key> [flags]
Terminal window
stratumctl admin services enable db

Show one service

Terminal window
stratumctl admin services get <key> [flags]
Terminal window
stratumctl admin services get db
stratumctl admin services get db --output json

List every service with its state

Terminal window
stratumctl admin services list [flags]
Terminal window
stratumctl admin services list
stratumctl admin services list --output json

Delete every resource of a service, then switch it off

Terminal window
stratumctl admin services teardown <key> [flags]

List every live resource of the service, grouped by project, and what happens to it (a database instance keeps a final snapshot, which is not deleted). At a terminal it then asks for confirmation; nothing is deleted without one.

In a script, run it once to see the plan and its id, then confirm that exact plan:

Terminal window
stratumctl admin services teardown db
stratumctl admin services teardown db --confirm tdp-0123456789abcdef

If anything was created or deleted in between, the plan id no longer matches: nothing is deleted and the new plan is shown to confirm again. A resource with a blocker (deletion protection, a blue/green deployment) stops the whole teardown until it is cleared through its own API.

Tenants are refused from the moment it starts; the service switches off once nothing is left (at the earliest a minute after the start). Follow it with “teardown-status”, or –wait.

Terminal window
stratumctl admin services teardown db
stratumctl admin services teardown db --wait 10m
Flag Type Default Description
--confirm string Execute this plan id (from an earlier run) without asking
--wait duration 0s Wait up to this long for the teardown to finish (e.g. 10m)

Show a service teardown’s progress and what is left

Terminal window
stratumctl admin services teardown-status <key> [flags]
Terminal window
stratumctl admin services teardown-status db