shc connection connect

authenticate a backend and store its credentials

Synopsis

Connect a backend (DNS, proxy, ca-signer, restic) and store its credentials in vault. —type selects the capability implementation (cloudflare, pfsense, bind, powerdns-local, …) and defaults to .

DNS: —zone declares a zone this connection manages (repeatable). It is REQUIRED for local/LAN-only DNS types (pfsense, bind, powerdns-local), whose zones cannot be auto-discovered; public providers (cloudflare, route53, …) may omit it and have zones confirmed against the provider.

Uniform grammar: inline dns.providers.* config (the same provider/providers. shape vault uses) is the file-config path; connection connect is the connection-backed overlay the factory consults first, falling through to the inline config when no connection owns the provider.

shc connection connect <name> [flags]

Options

      --cred stringArray   credential field, key=value (repeatable)
      --endpoint string    backend endpoint (if applicable)
  -h, --help               help for connect
      --scope string       write tier: tenant (default) | system (master/global, admin)
  -t, --tenant string      owning tenant (defaults to the active tenant)
      --type string        capability type / impl (cloudflare, pfsense, bind, powerdns-local, …); defaults to <name>
      --zone stringArray   DNS zone this connection manages (repeatable; required for local DNS types)

Options inherited from parent commands

      --config stringArray   extra YAML config file to layer on top of auto-discovered config; repeatable, later files win
  -d, --debug                enable debug mode (default: $SHC_DEBUG)
  -e, --environment string   environment name (default: $SHC_ENVIRONMENT)
      --exclude string       comma-separated dotted paths to drop
      --fields string        comma-separated columns/keys to show (and their order)
      --filter string        comma-separated dotted paths to keep (drops everything else)
  -o, --output string        output format: tty|text|json|yaml (default: $SHC_OUTPUT)
  -s, --stack string         stack name (default: $SHC_STACK)
  -v, --verbose              verbose output (default: $SHC_VERBOSE)

shc connection connect