Viewing operations with a secret
The system logs all actions with Yandex Lockbox resources as a list of operations. Each operation gets an ID.
Getting a list of operations
- In the management console, select the folder the secret belongs to.
- Navigate to Lockbox.
- In the left-hand menu, select Secrets.
- Click the name of the secret you need.
- In the left-hand panel, select Operations.
If you do not have the Yandex Cloud CLI yet, install and initialize it.
The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also specify a different folder for any command using --folder-name or --folder-id. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.
To get a list of operations for a secret, run this command:
yc lockbox secret list-operations <secret_name_or_ID>
Result:
+----------------------+---------------------+----------------------+---------------------+--------+---------------+
| ID | CREATED AT | CREATED BY | MODIFIED AT | STATUS | DESCRIPTION |
+----------------------+---------------------+----------------------+---------------------+--------+---------------+
| e6qj8hr2mfoj******** | 2024-03-27 02:47:03 | aje9k8luj4qf******** | 2024-03-27 02:47:03 | DONE | Update secret |
| e6q4145hccpl******** | 2024-03-27 02:46:40 | aje9k8luj4qf******** | 2024-03-27 02:46:40 | DONE | Update secret |
+----------------------+---------------------+----------------------+---------------------+--------+---------------+
By default, information about operations is output as text. To get more details, use --format to specify the yaml or json output format:
yc lockbox secret list-operations <secret_name_or_ID> --format yaml
Result:
- id: e6qj8hr2mfoj********
description: Update secret
created_at: "2024-03-27T02:47:03.482004186Z"
created_by: aje9k8luj4qf********
modified_at: "2024-03-27T02:47:03.482036369Z"
done: true
metadata:
'@type': type.googleapis.com/yandex.cloud.lockbox.v1.UpdateSecretMetadata
secret_id: e6qnva6ntl66********
response:
'@type': type.googleapis.com/google.protobuf.Empty
value: {}
- id: e6q4145hccpl********
description: Update secret
created_at: "2024-03-27T02:46:40.035110019Z"
created_by: aje9k8luj4qf********
modified_at: "2024-03-27T02:46:40.035138179Z"
done: true
metadata:
'@type': type.googleapis.com/yandex.cloud.lockbox.v1.UpdateSecretMetadata
secret_id: e6qnva6ntl66********
response:
'@type': type.googleapis.com/google.protobuf.Empty
value: {}
Use either the listOperations REST API method for the Secret resource or the SecretService/ListOperations gRPC API call.
Getting operation details
-
Get the list of operations for the resource.
-
Copy the operation ID.
-
Get the operation details:
CLIAPIIf you do not have the Yandex Cloud CLI yet, install and initialize it.
The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the
yc config set folder-id <folder_ID>command. You can also specify a different folder for any command using--folder-nameor--folder-id. If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.Run this command:
yc operation get <operation_ID>Result:
id: e6qj8hr2mfoj******** description: Update secret created_at: "2024-03-27T02:47:03.482Z" created_by: aje9k8luj4qf******** modified_at: "2024-03-27T02:47:03.482Z" done: true metadata: '@type': type.googleapis.com/yandex.cloud.lockbox.v1.UpdateSecretMetadata secret_id: e6qnva6ntl66******** response: '@type': type.googleapis.com/yandex.cloud.lockbox.v1.Secret id: e6qnva6ntl66******** folder_id: b1g681qpemb4******** created_at: "2024-03-27T02:45:05.184Z" name: top-secret labels: key2: value2 status: ACTIVE current_version: id: e6qo5a6imnm0******** secret_id: e6qnva6ntl66******** created_at: "2024-03-27T02:45:05.184Z" status: ACTIVE payload_entry_keys: - key deletion_protection: trueUse the OperationService/Get gRPC API call.