Issue Let's Encrypt cert via Certificate Manager

Request managed wildcard cert then check status; note: needs DNS/HTTP validation to issue

yc certificate-manager certificate request --name <name> --domains <host>,*.<host> && yc certificate-manager certificate list --format json | jq -r '.[] | "\(.name)\t\(.status)\t\(.not_after)"'
tool
yc32 commands
tags
yctlssecurity

More yc commands

  • Switch active folder
    yc config set folder-id <id> && yc config list

    Set default folder-id for the active profile; verify with config list

  • Create named profile
    yc config profile create prod && yc config profile activate prod

    Isolate creds per env; use yc --profile prod or YC_PROFILE in CI

  • Mint short-lived IAM token
    export YC_TOKEN=$(yc iam create-token)

    OAuth->IAM token, ~12h TTL; feed to API/Terraform via YC_TOKEN env

  • Service account for CI
    yc iam service-account create --name sa-ci --description 'CI deployer'

    Create SA for pipelines; bind least-privilege roles separately

  • Authorized key for SA
    yc iam key create --service-account-name sa-ci --output key.json

    Authorized key JSON for non-interactive auth; note: rotate & vault it

all 32 yc commands