You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After refreshing the token, `cloudflared` can no longer establish new connections to Cloudflare using the old token. However, existing connectors will remain active and the tunnel will continue serving traffic.
252
253
253
-
2. On half of your `cloudflared` replicas, update `cloudflared` to use the new token. For example, on a Linux host:
254
+
1. On half of your `cloudflared` replicas, update `cloudflared` to use the new token. For example, on a Linux host:
254
255
255
256
```sh
256
257
sudo cloudflared service install <TOKEN>
257
258
```
258
259
259
-
3. Restart `cloudflared`:
260
+
1. Restart `cloudflared`:
260
261
261
262
```sh
262
263
sudo systemctl restart cloudflared.service
263
264
```
264
265
265
-
4. Confirm that the service started correctly:
266
+
1. Confirm that the service started correctly:
266
267
267
268
```sh
268
269
sudo systemctl status cloudflared
269
270
```
270
271
271
272
While these replicas are connecting to Cloudflare with the new token, traffic will automatically route through the other replicas.
272
273
273
-
5. Wait 10 minutes for traffic to route through the new connectors.
274
+
1. Wait 10 minutes for traffic to route through the new connectors.
274
275
275
-
6. Repeat steps 2, 3, and 4 for the second half of the replicas.
276
+
1. Repeat steps 2, 3, and 4 for the second half of the replicas.
276
277
277
278
The tunnel token is now fully rotated. The old token is no longer in use.
278
279
@@ -285,7 +286,7 @@ If your tunnel token is compromised, we recommend taking the following steps:
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/identity/idp-integration/entra-id.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -278,7 +278,7 @@ You can require users to re-enter their credentials into Entra ID whenever they
278
278
2.[Update the Entra ID identity provider](/api/resources/zero_trust/subresources/identity_providers/methods/update/) using a `PUT` request. In the request body, include all existing configurations and set the `prompt` parameter to either `login` or `select_account`. For example,
The policy is now removed from the applications endpoint (`/access/apps/{app_id}/policies`) and managed using the [reusable policies endpoints](/api/resources/zero_trust/subresources/access/subresources/policies/)(`/access/policies/{policy_id}`).
89
+
The policy is now removed from the applications endpoint (`/access/apps/$APP_ID/policies`) and managed using the [reusable policies endpoints](/api/resources/zero_trust/subresources/access/subresources/policies/)(`/access/policies/$POLICY_ID`).
0 commit comments