Mint short-lived IAM token yc
OAuth->IAM token, ~12h TTL; feed to API/Terraform via YC_TOKEN env
export YC_TOKEN=$(yc iam create-token)
more yc
all 32 commands →
Service account for CI
yc iam service-account create --name sa-ci --description 'CI deployer'
Authorized key for SA
yc iam key create --service-account-name sa-ci --output key.json
Grant role to SA
yc resource-manager folder add-access-binding <id> --role editor --service-account-name sa-ci
Write kubeconfig for cluster
yc managed-kubernetes cluster get-credentials <name> --external --force
List clusters as JSON
yc managed-kubernetes cluster list --format json | jq -r '.[]|[.name,.status,.id]|@tsv'