When you configure R10k and/or Code Manager, you point at a URL for the control_repo. Currently, the only way you can do that is with an SSH key you generate and tell r10k where the repo is.
I would like a way (and if I’ve missed it, please tell me) to just tell r10k/CM to go to a tokenized HTTPS URL instead, and not use SSH