Credentials & dashboard
Get your admin token and open your Rivet dashboard.
After Rivet confirms your deployment is ready, run these commands from your extracted bundle’s root directory. The same commands work for AWS and Google Cloud.
Requirements
- Your deployment bundle and access to its Terraform state
- Terraform 1.9 or newer, below 2.0, and Python 3.9 or newer
- An authenticated AWS CLI or Google Cloud CLI, with permission to read the admin secret and access the cluster
- kubectl and permission to forward pod ports
- For Google Cloud: the GKE authentication plugin
Steps
Get your admin token
python3 scripts/access.py admin-token
# Expected: your admin token
Copy the token for sign-in. It is read directly from your cloud’s secret manager, not saved to Terraform state or a file.
Open your Rivet dashboard
python3 scripts/access.py dashboard
# Expected: a local tunnel and your browser opening http://127.0.0.1:6420/ui
The helper opens your browser and forwards a local port to your deployment. Sign in with the admin token, and keep the terminal open until you’re finished; Ctrl+C closes the tunnel.
Regions
To select a region, add --region:
python3 scripts/access.py admin-token --region us-east-1
# Expected: the selected region's admin token
python3 scripts/access.py dashboard --region us-east-1
# Expected: a local tunnel to the selected region's dashboard
Manual access
Get your admin token
- Find the admin-secret reference in your Terraform deployment outputs
- Open that secret in AWS Secrets Manager or Google Cloud Secret Manager
- Copy its value—the admin token, not the operator token used in
RIVET_BYOC_OPERATOR_TOKEN
Open the dashboard
-
Open your deployment endpoint with
/uiappended, or create a local tunnel:Configure
kubectlaccess to your cluster, then run:kubectl --context "<cluster-context>" -n rivet \ port-forward --address 127.0.0.1 service/rivet-engine 6420:6420 # Expected: Forwarding from 127.0.0.1:6420 -> 6420Replace
<cluster-context>with your Kubernetes context andrivetwith yourkubernetes_namespaceif you changed the default. Open http://127.0.0.1:6420/ui and keep the command running. -
Sign in with your admin token
Provision new tokens
Create tokens with the permissions your application needs. See Role-Based Access Control.