cloudtaser-cli source provision-bao-tls¶
Provision barrier-backed OpenBao listener PKI after initialization and unseal
Usage¶
Flags¶
| Flag | Type | Default | Required | Description |
|---|---|---|---|---|
--help, -h |
bool | false |
no | help for provision-bao-tls |
--kubeconfig |
string | (empty) |
no | kubeconfig for public trust publication |
--namespace, -n |
string | openbao |
no | namespace of the existing OpenBao release |
--release-name |
string | openbao |
no | existing cloudtaser-openbao release (default PKI settings) |
--secretstore-address |
string | (empty) |
no | verified HTTPS endpoint of the initialized, unsealed OpenBao leader |
--secretstore-ca-file |
string | (empty) |
no | public bootstrap trust bundle for verified TLS |
--secretstore-token-file |
string | (empty) |
no | administrator token file or '-' for stdin; SECRETSTORE_TOKEN also supported |