How-to guides

Each how-to is the shortest correct path to one goal. Every guide is plexctl-first: the CLI is the operator surface, and curl, make, goose, kubectl, or nats appear only for procedures plexctl does not yet wrap (node self-enrolment, the ReBAC schema, migrations, reverse-proxy config, signing-key rotation, peers, the event bus, and Clouds). The guides are grouped by bounded context to match the contexts and reference sections.

Getting started

• Install plexctl
• Log in with plexctl
• Log out with plexctl

Identity

• Manage Domains
• Manage Projects
• List identities in a Domain
• Invite an operator
• Manage Groups
• Manage IdP bindings
• Sign in as a Platform Operator
• Rotate service API tokens

Enrolment

• Issue a bootstrap token
• Register a Node

Labels

• Manage Label Definitions
• Assign labels to objects
• Authorize and manage Project labels in the Console

Audit

• Query the audit log

Authorization

• Apply the ReBAC schema

Mesh

• Operate peers and PSKs
• Operate reachability
• Inspect the signed event bus

Observability

• Deliver telemetry to Dash0
• Deliver logs to a syslog collector

Provisioning

• Manage Clouds
• Manage provider bundles
• Author a Blueprint

Platform

• Install plexsphere with Helm
• Seed tenancy Domains
• Run database migrations
• Run behind a reverse proxy
• Rotate the signing key
• Capture a support bundle

When to read this section

You have a concrete task on a running plexsphere installation. For first-run setup start with the tutorials; for command syntax see the CLI reference.