cloudtaser-cli source host-launch reconcile¶
After the public approval expires, verify its immutable source reservation, remove only its exact AppRole and policy, and verify their absence. Safe to retry after partial cleanup. Spent source and host markers remain; never reuse the launch ID. Scan the exact launch's remaining login tokens read-only and report their count; descendants remain unverified. This does not revoke tokens.
Usage¶
Flags¶
| Flag | Type | Default | Required | Description |
|---|---|---|---|---|
--approval-file |
string | (empty) |
yes | original public approval, retained after expiry |
--help, -h |
bool | false |
no | help for reconcile |
--secretstore-address |
string | (empty) |
no | exact approved source origin; defaults to approval |
--secretstore-ca-file |
string | (empty) |
no | public source CA bundle matching the approval (required before token input) |
--secretstore-token-file |
string | (empty) |
no | administrator token file or '-' for private stdin |
--timeout |
duration | 20m0s |
no | maximum time for the command to complete (default 20m0s; also CLOUDTASER_TIMEOUT env) |