provisionUnitCredential
Issue machine credentials for a unit.
The plaintext secret is returned exactly once and only its hash is stored, so a lost secret can only be replaced, never recovered. Re-provisioning a credentialed unit is refused rather than silently rotating — that would strand the unit in the field with a secret nobody holds.
Arguments
idInt!Required
Unit to issue a new credential for.
Returns
AutonomousUnitCredential!Required
Issue machine credentials for a unit.
The plaintext secret is returned exactly once and only its hash is stored, so a lost secret can only be replaced, never recovered. Re-provisioning a credentialed unit is refused rather than silently rotating — that would strand the unit in the field with a secret nobody holds.
Built with