Admiral
Agents

Clear an agent's identity binding

POST
/api/v1/agents/{agent_id}/clear-identity-binding

Only valid for KUBERNETES agents; TERRAFORM agents have no identity binding.

Scope: agent:write

Authorization

bearerAuth
AuthorizationBearer <token>

Personal Access Token (PAT) or Service Access Token (SAT). Pass the token in the Authorization header: Bearer admp_...

In: header

Path Parameters

agent_id*agent_id

The Admiral agent record ID (UUID), not the kube-system UID.

Formatuuid

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

curl -X POST "https://api.admiral.io/api/v1/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08/clear-identity-binding" \  -H "Content-Type: application/json" \  -d '{    "agent_id": "2b1e3b65-2c04-4fa2-a2d7-467901e98978"  }'
{  "accepted": true,  "expires_at": "2023-01-15T01:30:15.01Z"}

Overview

Admiral REST API endpoint reference

Create an agent POST

The request's `kind` selects the agent's execution plane (TERRAFORM or KUBERNETES) and determines the SAT's auto-assigned scopes. The kind is immutable. The response includes a `plain_text_token`: the raw SAT secret shown exactly once. Deploy this token to the agent binary for authentication. Scope: `agent:write`