You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/cre/account/cli-login.mdx
+7-2Lines changed: 7 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ title: "Logging in with the CLI"
5
5
metadata:
6
6
description: "Learn how to log in to the CRE CLI: authenticate through your browser, complete 2FA verification, and start using CLI commands."
7
7
datePublished: "2025-11-04"
8
-
lastModified: "2026-03-26"
8
+
lastModified: "2026-05-22"
9
9
---
10
10
11
11
import { Aside, ClickToZoom } from"@components"
@@ -81,4 +81,9 @@ Login completed successfully
81
81
82
82
Your CLI session is authenticated and ready to use.
83
83
84
-
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
84
+
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`~/.cre/cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
85
+
86
+
{/* prettier-ignore */}
87
+
<Asidetype="caution"title="Do not commit cre.yaml">
88
+
**`~/.cre/cre.yaml`** contains your session credentials. Keep it in `~/.cre/` on your local machine only—never commit it to version control or copy it into a project repository.
Copy file name to clipboardExpand all lines: src/content/cre/account/managing-auth.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ title: "Managing Authentication"
5
5
metadata:
6
6
description: "Manage your CRE CLI sessions: check if you're logged in, handle expired sessions, and securely log out when needed."
7
7
datePublished: "2025-11-04"
8
-
lastModified: "2026-03-26"
8
+
lastModified: "2026-05-22"
9
9
---
10
10
11
11
import { Aside } from"@components"
@@ -18,7 +18,7 @@ To authenticate your CLI with your CRE account, use the `cre login` command. Thi
18
18
19
19
For detailed login instructions, see the [Logging in with the CLI](/cre/account/cli-login) guide.
20
20
21
-
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
21
+
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. Do not commit **`~/.cre/cre.yaml`** to version control. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
To deploy and manage workflows with the CRE CLI, you need to authenticate your CLI session with your CRE account. This guide walks you through the browser-based login process.
Your CLI session is authenticated and ready to use.
7147
7147
7148
-
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
7148
+
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`~/.cre/cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
7149
+
7150
+
7151
+
<Aside type="caution" title="Do not commit cre.yaml">
7152
+
**`~/.cre/cre.yaml`** contains your session credentials. Keep it in `~/.cre/` on your local machine only—never commit it to version control or copy it into a project repository.
This guide covers how to manage your CLI authentication, including browser-based login, API key authentication, checking your status, handling session expiration, and logging out.
7157
7162
@@ -7161,7 +7166,7 @@ To authenticate your CLI with your CRE account, use the `cre login` command. Thi
7161
7166
7162
7167
For detailed login instructions, see the [Logging in with the CLI](/cre/account/cli-login) guide.
7163
7168
7164
-
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
7169
+
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. Do not commit **`~/.cre/cre.yaml`** to version control. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
7165
7170
7166
7171
## API key authentication
7167
7172
@@ -8387,7 +8392,7 @@ The typical workflow development process uses these commands in sequence:
@@ -8483,8 +8488,8 @@ In a CI/CD pipeline, configure `CRE_API_KEY` as a secret environment variable in
8483
8488
After a successful browser login — and when using an API key for commands that load credentials — the CLI stores **tenant context** at **`~/.cre/context.yaml`**. This file comes from the platform’s **`getTenantConfig`** data: a **registry manifest** for your organization so the CLI knows your CRE environment layout (for example vault gateway URL, registries, and allowed secrets auth flows per registry). Values are grouped under your CRE environment name (such as `PRODUCTION`).
8484
8489
8485
8490
8486
-
<Aside type="note" title="Credentials vs tenant context">
8487
-
**`cre.yaml`** holds authentication tokens for your session. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
8491
+
<Aside type="caution" title="Keep credential files out of version control">
8492
+
**`~/.cre/cre.yaml`** holds authentication tokens for your session. Do not commit it to version control or copy it into your project repository—it belongs only in `~/.cre/` on your local machine. If you copy `cre.yaml` elsewhere, add it to `.gitignore` so it is not tracked. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
8488
8493
</Aside>
8489
8494
8490
8495
The following example is **illustrative** only; your registries, addresses, and flow lists depend on your organization and environment.
To deploy and manage workflows with the CRE CLI, you need to authenticate your CLI session with your CRE account. This guide walks you through the browser-based login process.
Your CLI session is authenticated and ready to use.
6699
6699
6700
-
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
6700
+
In the terminal, the CLI may show **“Fetching user context…”** while it downloads your organization’s tenant configuration from the platform. It then writes **`~/.cre/context.yaml`** (registry manifest: vault gateway URL, registries, secrets auth flows, and related fields). That file is separate from your credentials file (`~/.cre/cre.yaml`). For details and a sanitized example, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
6701
+
6702
+
6703
+
<Aside type="caution" title="Do not commit cre.yaml">
6704
+
**`~/.cre/cre.yaml`** contains your session credentials. Keep it in `~/.cre/` on your local machine only—never commit it to version control or copy it into a project repository.
This guide covers how to manage your CLI authentication, including browser-based login, API key authentication, checking your status, handling session expiration, and logging out.
6709
6714
@@ -6713,7 +6718,7 @@ To authenticate your CLI with your CRE account, use the `cre login` command. Thi
6713
6718
6714
6719
For detailed login instructions, see the [Logging in with the CLI](/cre/account/cli-login) guide.
6715
6720
6716
-
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
6721
+
Browser login stores **`~/.cre/cre.yaml`** (credentials) and **`~/.cre/context.yaml`** (cached **tenant context**: registry manifest from the platform, including vault gateway URL and related settings). **`cre logout`** removes both. Do not commit **`~/.cre/cre.yaml`** to version control. For a full description and a sample `context.yaml` shape, see [Tenant context cache](/cre/reference/cli/authentication#tenant-context-cache).
6717
6722
6718
6723
## API key authentication
6719
6724
@@ -8000,7 +8005,7 @@ The typical workflow development process uses these commands in sequence:
@@ -8096,8 +8101,8 @@ In a CI/CD pipeline, configure `CRE_API_KEY` as a secret environment variable in
8096
8101
After a successful browser login — and when using an API key for commands that load credentials — the CLI stores **tenant context** at **`~/.cre/context.yaml`**. This file comes from the platform’s **`getTenantConfig`** data: a **registry manifest** for your organization so the CLI knows your CRE environment layout (for example vault gateway URL, registries, and allowed secrets auth flows per registry). Values are grouped under your CRE environment name (such as `PRODUCTION`).
8097
8102
8098
8103
8099
-
<Aside type="note" title="Credentials vs tenant context">
8100
-
**`cre.yaml`** holds authentication tokens for your session. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
8104
+
<Aside type="caution" title="Keep credential files out of version control">
8105
+
**`~/.cre/cre.yaml`** holds authentication tokens for your session. Do not commit it to version control or copy it into your project repository—it belongs only in `~/.cre/` on your local machine. If you copy `cre.yaml` elsewhere, add it to `.gitignore` so it is not tracked. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
8101
8106
</Aside>
8102
8107
8103
8108
The following example is **illustrative** only; your registries, addresses, and flow lists depend on your organization and environment.
Copy file name to clipboardExpand all lines: src/content/cre/reference/cli/authentication.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ title: "Authentication Commands"
5
5
metadata:
6
6
description: "Manage your CLI authentication: browser-based login, API key authentication for CI/CD, and session management commands."
7
7
datePublished: "2025-11-04"
8
-
lastModified: "2026-05-08"
8
+
lastModified: "2026-05-22"
9
9
---
10
10
11
11
import { Aside } from"@components"
@@ -104,8 +104,8 @@ In a CI/CD pipeline, configure `CRE_API_KEY` as a secret environment variable in
104
104
After a successful browser login — and when using an API key for commands that load credentials — the CLI stores **tenant context** at **`~/.cre/context.yaml`**. This file comes from the platform’s **`getTenantConfig`** data: a **registry manifest** for your organization so the CLI knows your CRE environment layout (for example vault gateway URL, registries, and allowed secrets auth flows per registry). Values are grouped under your CRE environment name (such as `PRODUCTION`).
105
105
106
106
{/* prettier-ignore */}
107
-
<Asidetype="note"title="Credentials vs tenant context">
108
-
**`cre.yaml`** holds authentication tokens for your session. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
107
+
<Asidetype="caution"title="Keep credential files out of version control">
108
+
**`~/.cre/cre.yaml`** holds authentication tokens for your session. Do not commit it to version control or copy it into your project repository—it belongs only in `~/.cre/` on your local machine. If you copy `cre.yaml` elsewhere, add it to `.gitignore` so it is not tracked. **`context.yaml`** holds **tenant configuration** returned by the platform, not secrets. **`cre logout`** removes both files from your machine.
109
109
</Aside>
110
110
111
111
The following example is **illustrative** only; your registries, addresses, and flow lists depend on your organization and environment.
0 commit comments