up0 service-accounts
Manage additional service accounts (GITOPS_ARCHITECTURE.md §3.4). Requires an authenticated caller — the first service account for an org is created only from the console's /settings/service-accounts page; there is no headless bootstrap.
up0 service-accounts
Manage additional service accounts (GITOPS_ARCHITECTURE.md §3.4). Requires an authenticated caller — the first service account for an org is created only from the console's /settings/service-accounts page; there is no headless bootstrap.
up0 service-accounts create
Create an additional service account. Owner only (server-enforced).
The client_secret is shown once — it is not retrievable afterwards. Authenticate with it via 'up0 auth login --client-id --client-secret'.
Usage: up0 service-accounts create [OPTIONS]| Name | Type | Default | Description |
|---|---|---|---|
--name | string | required | Display name |
--username | string | required | Unique username within the org |
--role | string | editor | Role to bind (owner, admin, editor, viewer) |
--output | string | - | Set to 'json' for JSON output |
up0 service-accounts list
List active service accounts for the organization. Owner only.
Usage: up0 service-accounts list [OPTIONS]| Name | Type | Default | Description |
|---|---|---|---|
--output | string | - | Set to 'json' for JSON output |
up0 service-accounts revoke
Revoke a service account. It can no longer authenticate.
Usage: up0 service-accounts revoke [OPTIONS] SERVICE_ACCOUNT_ID| Name | Type | Default | Description |
|---|---|---|---|
SERVICE_ACCOUNT_ID | string | required | Service account id |
--yes / -y | boolean | false | Skip the confirmation prompt |
--output | string | - | Set to 'json' for JSON output |
up0 service-accounts rotate
Rotate a service account's client secret. Invalidates the prior one.
Usage: up0 service-accounts rotate [OPTIONS] SERVICE_ACCOUNT_ID| Name | Type | Default | Description |
|---|---|---|---|
SERVICE_ACCOUNT_ID | string | required | Service account id |
--yes / -y | boolean | false | Skip the confirmation prompt |
--output | string | - | Set to 'json' for JSON output |