Create a CI/CD API Key

The kupe_api_key resource below provisions an admin-scoped key with an expiry date and exposes the raw value as a sensitive Terraform output, ready to hand to GitHub Actions or another CI system.

resource "kupe_api_key" "github_actions" {
  display_name = "GitHub Actions"
  role         = "admin"
  expires_at   = "2027-01-01T00:00:00Z"
}

# Store this in your CI/CD secrets
output "github_actions_api_key" {
  value     = kupe_api_key.github_actions.key
  sensitive = true
}

All kupe_api_key arguments are immutable; changing any field forces replacement. The new key is created and the old one is revoked, so plan rotations during low-traffic windows.

For role guidance, key storage, and rotation patterns, see Set Up an API Key for CI/CD.