»token revoke
The token revoke revokes authentication tokens and their children. If a TOKEN
is not provided, the locally authenticated token is used. The -mode flag can
be used to control the behavior of the revocation.
Examples
Revoke a token and all the token's children:
Revoke a token leaving the token's children:
Revoke a token by accessor:
Usage
The following flags are available in addition to the standard set of flags included on all commands.
-accessor(bool: false)- Treat the argument as an accessor instead of a token.-mode(string: "")- Type of revocation to perform. If unspecified, Vault will revoke the token and all of the token's children. If "orphan", Vault will revoke only the token, leaving the children as orphans. If "path", tokens created from the given authentication path prefix are deleted along with their children.-self- Perform the revocation on the currently authenticated token.