> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idyl.network/llms.txt
> Use this file to discover all available pages before exploring further.

# idyl rotate

> Rotate workload Vault resources

Rotate workload Vault resources

## Usage

```bash theme={null}
idyl rotate [resource] [name]
```

## Commands

| Command                   | Description                       |
| ------------------------- | --------------------------------- |
| `idyl rotate certificate` | Rotate a workload TLS certificate |
| `idyl rotate secret`      | Rotate a workload Secret          |

## Inherited flags

| Flag                                 | Description                                                        |
| ------------------------------------ | ------------------------------------------------------------------ |
| `-a <string>, --account-id <string>` | Account ID to use, overriding the current context.                 |
| `-c <string>, --context <string>`    | Use the named context for this command.                            |
| `--homedir <string>`                 | Override the configuration directory. Defaults to \~/.config/idyl. |
| `-n <string>, --namespace <string>`  | Namespace to address, overriding the entered context.              |
| `--network <string>`                 | Override the Network for this command.                             |
| `-p <string>, --profile <string>`    | Override the access profile for this command.                      |
| `-s <string>, --subnet <string>`     | Subnet to use for this command, overriding the current context.    |
| `--workspace <string>`               | Workspace within the namespace, overriding the entered context.    |

## Subcommand reference

### `idyl rotate certificate`

Rotate a workload TLS certificate

#### Usage

```bash theme={null}
idyl rotate certificate <name> [flags]
```

#### Aliases

* `certificates`

#### Flags

| Flag                                   | Description                                                                              |
| -------------------------------------- | ---------------------------------------------------------------------------------------- |
| `--ca-file <string>`                   | Optional PEM CA-chain file.                                                              |
| `--cert-file <string>`                 | Required. PEM certificate-chain file.                                                    |
| `--expected-resource-version <uint64>` | Required. Management resource version required for optimistic concurrency. Default: `0`. |
| `--idempotency-key <string>`           | Required. Unique idempotency key for this rotation.                                      |
| `--key-file <string>`                  | Required. PEM private-key file.                                                          |
| `-o <string>, --output <string>`       | Output format: table, json, yaml. Default: `table`.                                      |

### `idyl rotate secret`

Rotate a workload Secret

#### Usage

```bash theme={null}
idyl rotate secret <name> [flags]
```

#### Aliases

* `secrets`

#### Flags

| Flag                                   | Description                                                                              |
| -------------------------------------- | ---------------------------------------------------------------------------------------- |
| `--data-stdin <string>`                | Read one value from stdin for this key.                                                  |
| `--expected-resource-version <uint64>` | Required. Management resource version required for optimistic concurrency. Default: `0`. |
| `--from-env-file <stringArray>`        | Read KEY=VALUE entries from a bounded env file; repeatable.                              |
| `--from-file <stringArray>`            | Read one value from key=path; repeatable.                                                |
| `--idempotency-key <string>`           | Required. Unique idempotency key for this rotation.                                      |
| `--key <string>`                       | Key used by the interactive hidden prompt. Default: `value`.                             |
| `-o <string>, --output <string>`       | Output format: table, json, yaml. Default: `table`.                                      |