cloudtaser-cli target connect vanta

Initiates an OAuth2 authorization code flow with Vanta. Opens a browser for authorization, receives the callback, exchanges the code for tokens, and stores the tokens in the secret store at secret/cloudtaser/integrations/vanta.

The operator reads these tokens from the secret store to push compliance evidence (protection status, enforcement logs, control mappings) to Vanta automatically.

Usage

cloudtaser-cli target connect vanta [flags]

Examples

# Connect to Vanta
      cloudtaser-cli target connect vanta \
        --secretstore-address https://vault.eu.example.com \
        --secretstore-token-file /etc/cloudtaser/admin.token

  # Disconnect (revoke and delete tokens)
      cloudtaser-cli target connect vanta \
        --secretstore-address https://vault.eu.example.com \
        --secretstore-token-file /etc/cloudtaser/admin.token \
        --disconnect

  # Overwrite existing tokens
      cloudtaser-cli target connect vanta \
        --secretstore-address https://vault.eu.example.com \
        --secretstore-token-file /etc/cloudtaser/admin.token \
        --force

Flags

Flag	Type	Default	Required	Description
--callback-port	int	9876	no	local port for OAuth2 callback server
--disconnect	bool	false	no	revoke tokens and remove from secret store
--force	bool	false	no	overwrite existing tokens without confirmation
--help, -h	bool	false	no	help for vanta
--secretstore-address	string	(empty)	no	secret store address (required; env: CLOUDTASER_SECRETSTORE_ADDRESS, VAULT_ADDR)
--secretstore-token	string	(empty)	no	secret store token (prefer --secretstore-token-file or SECRETSTORE_TOKEN to avoid process-list exposure)
--secretstore-token-file	string	(empty)	no	path to a file containing the secret store token, or '-' to read it from stdin
--timeout	duration	2m0s	no	timeout waiting for browser authorization

All commands