Service accounts and API keys, enumctl 2026.09.4
enumctl 2026.09.4
- Create a service account with a one-shot key via
sa create --key(defaults to a 90-day expiry), or pass--print-token-onlyto output just the token - Create API keys that never expire with the new
--no-expiryflag - Manage service account API keys under
service-accounts keys(orsa keys) - List API keys across an entire project with
enumctl sa keys listby omitting the service account ID - Expiry error messages are now lowercase for consistent CLI output
Platform
- Service accounts and API keys are now available for automated workflows and CI/CD pipelines
- API keys support optional expiration and use identifiable prefix tokens
- Adopted object storage buckets are deletion-protected by default
- Raised default S3 user quotas
API and SDKs
- ServiceAccountService API for creating and managing service accounts and API keys
- New
UpdateObjectStorageBucketRPC to configure bucket settings and deletion protection - Go SDK (
client-go) and TypeScript SDK (client-ts) updated withServiceAccountServicesupport - TypeScript SDK updated with bucket deletion protection and
UpdateObjectStorageBucketsupport