pw orgs ssh-keys rotate

Replace the workspace SSH key of every member

Synopsis

The pw orgs ssh-keys rotate command gives every member of the organization a new workspace SSH key. Running workspaces switch to it within seconds and stopped ones at their next start. Keys that members added by hand to clusters or to services such as GitHub stop working when the grace period ends, which is at once unless --grace-period-hours sets up to 24 hours. Members whose workspace image is too old for managed keys are skipped. Requires the org:admin role.

You are asked to type the organization name to confirm. When not running in a terminal, pass it with --confirm instead. The rotation runs in the background; check it with pw orgs ssh-keys status.

pw orgs ssh-keys rotate [flags] <organization>

Examples

  pw orgs ssh-keys rotate my-org
  
  # Keep the old keys working for 24 more hours
  pw orgs ssh-keys rotate --grace-period-hours 24 my-org
  
  # Rotate from a script
  pw orgs ssh-keys rotate --confirm my-org my-org

Options

      --confirm string           The organization name, required when not running in a terminal
      --grace-period-hours int   Hours each old key keeps working, 0 to 24 (0 stops them at once)
  -h, --help                     help for rotate
  -o, --output string            Output format (table, json) (default "table")

Options inherited from parent commands

      --context string         The context to use. Overrides PW_CONTEXT environment variable and current context from config.
      --platform-host string   The Parallel Works ACTIVATE platform host to use. Overrides PW_PLATFORM_HOST environment variable and the current context's server.
  -v, --verbose                Enable verbose logging

pw orgs ssh-keys rotate