Manage Domains

The Domain is the tenancy root — every Project, Identity, and Group is owned by exactly one Domain. plexctl domain wraps the /v1/domains CRUD surface.

Prerequisites

• An authenticated session — see Log in with plexctl.
• Authorisation to administer Domains.

Steps

Create a Domain

plexctl domain create \
  --slug acme-corp \
  --display-name "Acme Corp" \
  --mesh-cidr 10.64.0.0/12 \
  --description "Primary tenant"

--slug, --display-name, and --mesh-cidr are required; the --mesh-cidr pool must be a canonical RFC 4632 range. The slug is immutable after creation.

List and inspect

plexctl domain list --all
plexctl domain get acme-corp        # accepts a UUID or a slug

Update mutable fields

plexctl domain update <domain-uuid> --display-name "Acme Corporation"

The patch is sparse — only the flags you set are sent. There is no --slug flag (the slug is frozen). An update that sets no field exits 2.

Delete an empty Domain

plexctl domain delete <domain-uuid> --yes

A Domain that still owns Projects or identities is rejected.

Verification

plexctl domain get <domain-uuid> --output json | jq '{slug, mesh_cidr}'

See also

• Manage Projects — carve sub-ranges out of a Domain.
• ../../reference/cli/plexctl/domain.md — every flag and exit code.
• ../../contexts/identity/tenancy.md — the tenancy model.