cloudtaser-cli target connect drata

Initiates an OAuth2 authorization code flow with Drata. Opens a browser for authorization, receives the callback, exchanges the code for tokens, and stores the tokens in the secret store at secret/cloudtaser/integrations/drata.

The operator reads these tokens from the secret store to push compliance evidence to Drata automatically.

Usage

cloudtaser-cli target connect drata [flags]

Examples

# Connect to Drata
      cloudtaser-cli target connect drata \
        --secretstore-address https://vault.eu.example.com \
        --secretstore-token-file /etc/cloudtaser/admin.token

  # Disconnect (revoke and delete tokens)
      cloudtaser-cli target connect drata \
        --secretstore-address https://vault.eu.example.com \
        --secretstore-token-file /etc/cloudtaser/admin.token \
        --disconnect

Flags

Flag	Type	Default	Required	Description
--callback-port	int	9876	no	local port for OAuth2 callback server
--disconnect	bool	false	no	revoke tokens and remove from secret store
--force	bool	false	no	overwrite existing tokens without confirmation
--help, -h	bool	false	no	help for drata
--secretstore-address	string	(empty)	no	secret store address (required; env: CLOUDTASER_SECRETSTORE_ADDRESS, VAULT_ADDR)
--secretstore-token	string	(empty)	no	secret store token (prefer --secretstore-token-file or SECRETSTORE_TOKEN to avoid process-list exposure)
--secretstore-token-file	string	(empty)	no	path to a file containing the secret store token, or '-' to read it from stdin
--timeout	duration	2m0s	no	timeout waiting for browser authorization

All commands