For supported configurations, you can change how {product-title} authenticates with your cloud provider.
To determine which cloud credentials strategy your cluster uses, see Determining the Cloud Credential Operator mode.
After installing {product-title}, some organizations require the rotation or removal of the cloud provider credentials that were used during the initial installation.
To allow the cluster to use the new credentials, you must update the secrets that the Cloud Credential Operator (CCO) uses to manage cloud provider credentials.
The Cloud Credential Operator (CCO) utility ccoctl supports updating secrets for clusters installed on {ibm-cloud-name}.
After installing an {azure-first} {product-title} cluster, you can enable {entra-first} to use short-term credentials.