Skip to main content
Create, list, and revoke JoinTokens. A JoinToken lets machines join one Fleet as Nodes without anyone signing in on them. Any number of machines may join with the same token until it expires, one hour after creation unless —expires-after says otherwise. Revoking a token ends it early: no machine can join with it afterwards, and the Nodes that already joined stay in the Fleet. The token secret is shown once, when the token is created, and cannot be recovered. On the machine, idyld join reads it from the IDYL_JOIN_TOKEN environment variable or from one line of standard input.

Usage

Aliases

  • join-tokens

Commands

Inherited flags

Examples

Subcommand reference

idyl join-token create

Create a JoinToken that lets machines join a Fleet as Nodes. The token is valid for one hour unless —expires-after states another lifetime between 1m and 24h. Any number of machines may join with it until it expires or is revoked. The token secret is printed once, to standard output, and cannot be shown again. Anyone holding it can add machines to the Fleet until it expires, so pass it to the machine without writing it into logs or shell history: idyld join reads it from the IDYL_JOIN_TOKEN environment variable or from one line of standard input.

Usage

Flags

Examples

idyl join-token get

Get one JoinToken, or list the account’s JoinTokens. With no argument, lists every JoinToken in the account; —fleet narrows the list to one Fleet’s tokens. With a JoinToken ID, shows that token: its Fleet, when it expires, and how many machines have joined with it. Neither form shows the token secret, which exists only in the output of create.

Usage

Aliases

  • list
  • ls

Flags

Examples

idyl join-token revoke

Revoke a JoinToken. It stops admitting machines at once and is removed; Nodes that already joined with it stay in their Fleet.

Usage

Flags

Examples