akka services jwks migrate

Migrate JWT keys to JWKS keysets.

Synopsis

The akka service jwks migrate command migrates deprecated JWT keys configured on a service to JWKS keysets.

Keys are grouped by issuer. Each issuer’s keys are combined into a single JWKS secret and a corresponding keyset is added to the service. Keys with no issuer are grouped together into one keyset with no issuer configured.

The old JWT keys are removed from the service once migration completes.

akka services jwks migrate [SERVICE] [flags]

Examples

> akka service jwks migrate my-service
> akka service jwks migrate my-service --secret-prefix my-prefix

Options

      --force-global           force an existing regional resource to be configured as a global resource
      --force-regional         force an existing global resource to be configured as a regional resource
  -h, --help                   help for migrate
      --owner string           the owner of the project to use, needed if you have two projects with the same name from different owners
      --project string         project to use if not using the default configured project
      --region string          region to use if project has more than one region
      --secret-prefix string   Prefix for generated JWKS secret names (defaults to service name).

Options inherited from parent commands

      --cache-file string   location of cache file (default "~/.akka/cache.yaml")
      --config string       location of config file (default "~/.akka/config.yaml")
      --context string      configuration context to use
      --disable-prompt      Disable all interactive prompts when running akka commands. If input is required, defaults will be used, or an error will be raised.
                            This is equivalent to setting the environment variable AKKA_DISABLE_PROMPTS to true.
  -o, --output string       set output format to one of [text,json,json-compact,go-template=] (default "text")
      --page-mode string    the mode for paging, either paged, buffered or auto. (default "auto")
  -q, --quiet               set quiet output (helpful when used as part of a script)
      --timeout duration    client command timeout (default 10s)
      --use-grpc-web        use grpc-web when talking to Akka APIs. This is useful when behind corporate firewalls that decrypt traffic but don't support HTTP/2.
      --verbose             set verbose output

SEE ALSO