yc lockbox

Written by

Updated at April 22, 2025

Manage Yandex Lockbox resources

Syntax:

yc lockbox <group>

yc lockbox payload — Access secret payload
- yc lockbox payload get — Get payload of the specified secret
yc lockbox secret — Manage secrets
- yc lockbox secret activate — Activate the specified secret
- yc lockbox secret add-access-binding — Add access binding for the specified secret
- yc lockbox secret add-version — Add new payload version for the specified secret based on an existing one
- yc lockbox secret cancel-version-destruction — Cancel destruction of the specified secret version
- yc lockbox secret create — Create a secret
- yc lockbox secret deactivate — Deactivate the specified secret
- yc lockbox secret delete — Delete the specified secret
- yc lockbox secret get — Show information about the specified secret
- yc lockbox secret list — List secrets for the specified folder
- yc lockbox secret list-access-bindings — List access bindings for the specified secret
- yc lockbox secret list-operations — List operations for the specified secret
- yc lockbox secret list-versions — List versions for the specified secret
- yc lockbox secret remove-access-binding — Remove access binding for the specified secret
- yc lockbox secret schedule-version-destruction — Schedule destruction of the specified secret version
- yc lockbox secret set-access-bindings — Set access bindings for the specified secret and delete all existing access bindings if there were any
- yc lockbox secret update — Update the specified secret

Flag	Description
`--profile`	`string` Set the custom configuration file.
`--debug`	Debug logging.
`--debug-grpc`	Debug gRPC logging. Very verbose, used for debugging connection problems.
`--no-user-output`	Disable printing user intended output to stderr.
`--retry`	`int` Enable gRPC retries. By default, retries are enabled with maximum 5 attempts. Pass 0 to disable retries. Pass any negative value for infinite retries. Even infinite retries are capped with 2 minutes timeout.
`--cloud-id`	`string` Set the ID of the cloud to use.
`--folder-id`	`string` Set the ID of the folder to use.
`--folder-name`	`string` Set the name of the folder to use (will be resolved to id).
`--endpoint`	`string` Set the Cloud API endpoint (host:port).
`--token`	`string` Set the OAuth token to use.
`--impersonate-service-account-id`	`string` Set the ID of the service account to impersonate.
`--no-browser`	Disable opening browser for authentication.
`--format`	`string` Set the output format: text (default), yaml, json, json-rest.
`--jq`	`string` Query to select values from the response using jq syntax
`-h`,`--help`	Display help for the command.