Skip to content
SHC Docs

shc ca import

shc ca import

Section titled “shc ca import”

import an operator-supplied PEM chain as a tenant CA (manual provenance)

Synopsis

Section titled “Synopsis”

Import a FIRST-time tenant CA from operator-supplied PEM files: —root (the CA root), —intermediate (signed by the root) and —key (the intermediate’s private key, escrowed to vault — never persisted to the DB or config). Refuses a tenant that already has a CA (use ca reprovision).

shc ca import [flags]

Options

Section titled “Options”
  -h, --help                  help for import
      --intermediate string   path to the intermediate cert PEM (required)
      --key string            path to the intermediate private-key PEM (required)
      --root string           path to the root CA cert PEM (required)
  -t, --tenant string         owning tenant (defaults to the active tenant)

Options inherited from parent commands

Section titled “Options inherited from parent commands”
      --config stringArray   extra YAML config file to layer on top of auto-discovered config; repeatable, later files win
  -d, --debug                enable debug mode (default: $SHC_DEBUG)
  -e, --environment string   environment name (default: $SHC_ENVIRONMENT)
      --exclude string       comma-separated dotted paths to drop
      --fields string        comma-separated columns/keys to show (and their order)
      --filter string        comma-separated dotted paths to keep (drops everything else)
  -o, --output string        output format: tty|text|json|yaml (default: $SHC_OUTPUT)
  -s, --stack string         stack name (default: $SHC_STACK)
  -v, --verbose              verbose output (default: $SHC_VERBOSE)

SEE ALSO

Section titled “SEE ALSO”
  • shc ca - manage per-tenant certificate authorities