Access controls

Members, firewall rules, secrets, and settings can be attached to an organization, project, or Site. Pass exactly one scope flag: --organization-id, --project-id, or --site-id. For guidance on choosing the right scope, see Resource Hierarchy. For the platform security model behind members, firewall rules, and secrets, see Security and Operations.

Members

sitectl libops create member \
  --site-id "$SITE_ID" \
  --account-id "$ACCOUNT_ID" \
  --role developer

sitectl libops list members --site-id "$SITE_ID"
sitectl libops edit member "$ACCOUNT_ID" --site-id "$SITE_ID" --role owner
sitectl libops delete member "$ACCOUNT_ID" --site-id "$SITE_ID" --yes

Roles are owner, developer, and read.

Firewall

sitectl libops create firewall \
  --site-id "$SITE_ID" \
  --name office \
  --cidr 203.0.113.10/32 \
  --type FIREWALL_RULE_TYPE_HTTPS_ALLOWED

sitectl libops list firewall --site-id "$SITE_ID"
sitectl libops delete firewall "$RULE_ID" --site-id "$SITE_ID" --yes

Firewall rules do not currently support in-place update.

Secrets

sitectl libops create secret \
  --site-id "$SITE_ID" \
  --name SMTP_PASSWORD \
  --value "$SMTP_PASSWORD"

sitectl libops create secret \
  --site-id "$SITE_ID" \
  --name TLS_PRIVATE_KEY \
  --value-file ./tls.key

sitectl libops list secrets --site-id "$SITE_ID"
sitectl libops edit secret "$SECRET_ID" --site-id "$SITE_ID" --value "$NEW_VALUE"
sitectl libops delete secret "$SECRET_ID" --site-id "$SITE_ID" --yes

Secret values are write-only from the CLI.

Settings

sitectl libops create setting \
  --site-id "$SITE_ID" \
  --key support_email \
  --value help@example.edu

sitectl libops list settings --site-id "$SITE_ID"
sitectl libops edit setting "$SETTING_ID" --site-id "$SITE_ID" --value helpdesk@example.edu
sitectl libops delete setting "$SETTING_ID" --site-id "$SITE_ID" --yes

LibOps plugin

Authentication

Resources

Task Agent

Runtime workflows

Access controls

Domains

Access controls

Members

Firewall

Secrets

Settings

​Members

​Firewall

​Secrets

​Settings

Members

Firewall

Secrets

Settings