Skip to main content
Version: 3.2

Access Keys

Access Keys in Loft are used for authentication to Loft via the Loft CLI, or by any HTTP utilities (i.e. curl). Access Keys can be generated by any Loft user, the generated Access Key will provide the key's user with the same permissions as the user who generated the key.

Access Keys may optionally be scoped, that is, have their access limited to a particular cluster, and within that cluster particular namespace(s) or virtual clusters. This is a great option to use for keys generated for automated processes such as a CI pipeline.

Create an Access Key​

  1. Select the Users field on the left menu bar.
  2. Click the Users button on the User Management screen.
  3. Find the user you would like to generate an Access Key for from the list of users. Click the user.
  4. In the User Access Key management screen click the button.
  5. In the drawer that appears from the right, give the Access Key a display name in theEnter a display name for this access key box.
  6. Optional If you'd like to limit the scope of the Access Key, expand theLimit Access Key Scope configuration section. In this section you can select the cluster(s), namespace(s), and virtual clusters of which to limit the Access Key scope to.
  7. Click the button.
  8. In the pop up window, make sure to copy the generated Access Key from the prompt as you will not be able to fetch this key again!
  9. Click the button.

Login via Access Key​

You can use an access key to login to Loft via the Loft CLI:

loft login my-loft-url.com --access-key ACCESS_KEY