Custodia commands¶
custodia server¶
Custodia server
usage: custodia [-h] [--debug] [--instance INSTANCE] [configfile]
Positional Arguments¶
| configfile | Path to custodia server config (default: /etc/custodia/{instance}/custodia.conf) |
Named Arguments¶
| --debug | Debug mode Default: False |
| --instance | Instance name |
custodia client¶
Custodia command line interface
usage: custodia-cli [-h] [--server SERVER | --instance INSTANCE]
[--uds-urlpath UDS_URLPATH] [--header HEADER] [--verbose]
[--debug] [--timeout TIMEOUT] [--cafile CAFILE]
[--certfile CERTFILE] [--keyfile KEYFILE] [--gssapi]
{mkdir,rmdir,ls,get,set,del,plugins} ...
Named Arguments¶
| --server | Custodia server location, supports http://, https://, or path to a unix socket. |
| --instance | Instance name (default: CUSTODIA_INSTANCE or ‘custodia’) Default: custodia |
| --uds-urlpath | URL path for Unix Domain Socket Default: “/secrets/” |
| --header | Extra headers |
| --verbose | Default: False |
| --debug | Default: False |
| --timeout | Connection timeout Default: 10.0 |
| --cafile | PEM encoded file with root CAs |
TLS client cert auth¶
| --certfile | PEM encoded file with certs for TLS client authentication |
| --keyfile | PEM encoded key file (if not given, key is read from certfile) |
GSSAPI auth¶
| --gssapi | Use Negotiate / GSSAPI auth Default: False |