Commands
up0 auth
Authenticate with up0 via OIDC (browser login)
up0 auth
Authenticate with up0 via OIDC (browser login)
up0 auth login
Log in through the browser (OIDC Authorization Code + PKCE), or headlessly as a service account with --client-id/--client-secret (GITOPS_ARCHITECTURE.md §3.3).
Usage: up0 auth login [OPTIONS]| Name | Type | Default | Description |
|---|---|---|---|
--client-id | string | - | Service account client id — switches to the client_credentials grant (no browser). Requires --client-secret. Created from the console's /settings/service-accounts page or 'up0 service-accounts create'. |
--client-secret | string | - | Service account client secret. Requires --client-id. |
--api-url | string | - | Backend API URL, stored on the active profile. #1572: there is no production default any more, so a profile that has never set this (and has no UP0_API_URL) needs it once, here or by hand-editing config.yaml. |
--issuer | string | - | Zitadel issuer URL, stored on the active profile. Same reasoning as --api-url — overrides UP0_ZITADEL_ISSUER's absence, not its presence: the env var still wins if both are set. |
up0 auth logout
Clear stored OIDC tokens.
Usage: up0 auth logout [OPTIONS]