stella admin - Administrative operations
The supported administration paths described here are Platform readiness and governed local Authority recovery. Run stella admin --help for the installed command tree.
Platform readiness
stella admin diagnostics health
stella admin diagnostics health --detail
stella admin diagnostics health --format json
The command reads GET /api/v1/platform/health/readiness through the configured backend. It reports setup-blocking required dependencies and configured optional services. Configure STELLAOPS_BACKEND_URL and the credentials described in the auth guide. JSON is the owner’s readiness response, written to raw stdout.
Local Authority recovery
admin users password-set is the installation recovery path. It runs inside the Authority runtime environment with explicit --confirm-authority-access, a reason and a bounded credential lifetime. It records use durably before changing the credential and limits recovery to structural tenants. Use --password-stdin to keep a password out of the process command line.
stella admin users password-set --help
stella admin break-glass list --unreconciled-only
stella admin break-glass reconcile --help
Reconciliation explicitly acknowledges a recorded recovery use; an unreconciled use remains a doctor Critical. These commands preserve the local recovery boundary and do not depend on a working Authority HTTP endpoint. Follow the Authority recovery design and the released-site operator guide.
Retired ownerless routes
PCD-292 withdrew the admin policy and admin system groups, and admin users list, add, revoke and update. They called /api/v1/admin/policy/*, /api/v1/admin/system/* and /api/v1/admin/users*, which no host serves. The parser rejects those verbs; there are no compatibility aliases.
Policy workflows use stella policy and its owner API. General user administration uses the authenticated Console/Authority surface. Password reset remains an explicit recovery operation.
The former admin feeds group is also retired. stella sources status and stella config sources list read the Vulnerabilities owner’s source generations. Source refresh and scheduling are configured at the owning service.
PCD-293 also withdrew the sample admin tenants and admin audit groups and the diagnostics connectivity and logs verbs. They printed fixed inventory, events and successful actions without calling an owner. Tenant administration uses the authenticated Console/Authority surface; service logs and connectivity measurements come from the installation’s monitoring tools.