How-to guides

Each how-to is the shortest correct path to one goal. Every guide is plexctl-first: the CLI is the operator surface, and curl, make, goose, kubectl, or nats appear only for procedures plexctl does not yet wrap (node self-enrolment, the ReBAC schema, migrations, reverse-proxy config, signing-key rotation, peers, the event bus, and Clouds). The guides are grouped by bounded context to match the contexts and reference sections.

Getting started

• Install plexctl
• Log in with plexctl

Identity

• Manage Domains
• Manage Projects
• List identities in a Domain
• Invite an operator
• Manage Groups
• Manage IdP bindings
• Rotate service API tokens

Enrolment

• Issue a bootstrap token
• Register a Node

Labels

• Manage Label Definitions
• Assign labels to objects

Audit

• Query the audit log

Authorization

• Apply the ReBAC schema

Mesh

• Operate peers and PSKs
• Operate reachability
• Inspect the signed event bus

Provisioning

• Manage Clouds

Platform

• Seed tenancy Domains
• Run database migrations
• Run behind a reverse proxy
• Rotate the signing key
• Capture a support bundle

When to read this section

You have a concrete task on a running plexsphere installation. For first-run setup start with the tutorials; for command syntax see the CLI reference. Dashboard how-tos are intentionally out of scope here and will return in a later iteration.