stratumctl service-accounts
Manage IAM service accounts
stratumctl service-accounts [flags]Aliases: service-account, sa
Subcommands
Section titled “Subcommands”stratumctl service-accounts create: Create a new service accountstratumctl service-accounts delete: Soft-delete a service account. Idempotent. Cascade-revokes signing keys.stratumctl service-accounts get: Describe a service accountstratumctl service-accounts keys: Manage service-account signing keysstratumctl service-accounts list: List service accounts in a projectstratumctl service-accounts update: Update a service account (sparse PATCH)
stratumctl service-accounts create
Section titled “stratumctl service-accounts create”Create a new service account
stratumctl service-accounts create <displayName> [flags]Examples
Section titled “Examples”stratumctl service-accounts create ci-runner --project p-team-astratumctl service-accounts create ci-runner --project p-team-a --description "CI pipeline identity"| Flag | Type | Default | Description |
|---|---|---|---|
--description |
string | Free-form description | |
--project |
string | Project ID |
stratumctl service-accounts delete
Section titled “stratumctl service-accounts delete”Soft-delete a service account. Idempotent. Cascade-revokes signing keys.
stratumctl service-accounts delete <id> [flags]Examples
Section titled “Examples”stratumctl service-accounts delete sa-7k2m9x4q8a --project p-team-a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID |
stratumctl service-accounts get
Section titled “stratumctl service-accounts get”Describe a service account
stratumctl service-accounts get <id> [flags]Examples
Section titled “Examples”stratumctl service-accounts get sa-7k2m9x4q8a --project p-team-astratumctl service-accounts get sa-7k2m9x4q8a --project p-team-a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID |
stratumctl service-accounts keys
Section titled “stratumctl service-accounts keys”Manage service-account signing keys
stratumctl service-accounts keys [flags]Aliases: key
Subcommands
Section titled “Subcommands”stratumctl service-accounts keys create: Mint a new signing key. Secret printed ONCE.stratumctl service-accounts keys get: Describe a signing keystratumctl service-accounts keys list: List signing keys for a service accountstratumctl service-accounts keys revoke: Revoke a signing key. Idempotent.
stratumctl service-accounts keys create
Section titled “stratumctl service-accounts keys create”Mint a new signing key. Secret printed ONCE.
stratumctl service-accounts keys create [flags]Examples
Section titled “Examples”stratumctl service-accounts keys create --project p-team-a --service-account sa-7k2m9x4q8a --label ci --ttl 720h| Flag | Type | Default | Description |
|---|---|---|---|
--label |
string | Operator-facing label | |
--project |
string | Project ID | |
--service-account |
string | Service-account ID | |
--ttl |
string | TTL (Go duration; empty = no expiry) |
stratumctl service-accounts keys get
Section titled “stratumctl service-accounts keys get”Describe a signing key
stratumctl service-accounts keys get <key-id> [flags]Examples
Section titled “Examples”stratumctl service-accounts keys get sak-3k8m2x7q9a --project p-team-a --service-account sa-7k2m9x4q8astratumctl service-accounts keys get sak-3k8m2x7q9a --project p-team-a --service-account sa-7k2m9x4q8a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID | |
--service-account |
string | Service-account ID |
stratumctl service-accounts keys list
Section titled “stratumctl service-accounts keys list”List signing keys for a service account
stratumctl service-accounts keys list [flags]Examples
Section titled “Examples”stratumctl service-accounts keys list --project p-team-a --service-account sa-7k2m9x4q8astratumctl service-accounts keys list --project p-team-a --service-account sa-7k2m9x4q8a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID | |
--service-account |
string | Service-account ID |
stratumctl service-accounts keys revoke
Section titled “stratumctl service-accounts keys revoke”Revoke a signing key. Idempotent.
stratumctl service-accounts keys revoke <key-id> [flags]Examples
Section titled “Examples”stratumctl service-accounts keys revoke sak-3k8m2x7q9a --project p-team-a --service-account sa-7k2m9x4q8a| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID | |
--service-account |
string | Service-account ID |
stratumctl service-accounts list
Section titled “stratumctl service-accounts list”List service accounts in a project
stratumctl service-accounts list [flags]Examples
Section titled “Examples”stratumctl service-accounts list --project p-team-astratumctl service-accounts list --project p-team-a --output json| Flag | Type | Default | Description |
|---|---|---|---|
--project |
string | Project ID |
stratumctl service-accounts update
Section titled “stratumctl service-accounts update”Update a service account (sparse PATCH)
stratumctl service-accounts update <id> [flags]Examples
Section titled “Examples”stratumctl service-accounts update sa-7k2m9x4q8a --project p-team-a --display-name "ci runner"stratumctl service-accounts update sa-7k2m9x4q8a --project p-team-a --state disabled| Flag | Type | Default | Description |
|---|---|---|---|
--description |
string | New description | |
--display-name |
string | New display name | |
--project |
string | Project ID | |
--state |
string | New state: active|disabled |