Skip to content
SHC Docs

shc nebula rotate-now

drive one off-schedule cert rotation sweep

Trigger an immediate sweep of host certs, bypassing the 24h ticker. Useful when an operator has just provisioned a new node and wants the rotation logic to pick it up without waiting.

shc nebula rotate-now [flags]
-h, --help help for rotate-now
--config stringArray extra YAML config file to layer on top of auto-discovered config; repeatable, later files win
-d, --debug enable debug mode (default: $SHC_DEBUG)
-e, --environment string environment name (default: $SHC_ENVIRONMENT)
--exclude string comma-separated dotted paths to drop
--fields string comma-separated columns/keys to show (and their order)
--filter string comma-separated dotted paths to keep (drops everything else)
-o, --output string output format: tty|text|json|yaml (default: $SHC_OUTPUT)
-s, --stack string stack name (default: $SHC_STACK)
-t, --tenant string tenant name (default: $SHC_TENANT)
-v, --verbose verbose output (default: $SHC_VERBOSE)
  • shc nebula - nebula mesh PKI admin (cert rotation, status)