ad5ad69d54
* Add 'Commands (CLI)' docs * Update index.mdx Added Environment variables section * Add 'connect' sub-folder structure * Adding listen address and port environment variables * add connect to the docs navigation * docs: Add Florin's update to index * docs: Fix links and typo * Add front-matter to resolve the PR check issue * Update postgres.mdx Boundary helper for POSTGRES * Completed 'boundary accounts' command docs * Draft connection option documentatino for kube, http, and rdp (#3455) * Style updates for consistency * Clean up using partials * Add 'ssh' doc & updated style for consistency * Fix paste error * Fix the format issue on 'connect ssh' doc * Add 'auth-methods' command doc (#3520) * Add the docs for 'logout', 'server', and 'dev' commands (#3524) * Add the docs for 'logout', 'server', and 'dev' commands * Update the front matter * Add auth-tokens and authenticate command docs (#3575) * Add config command docs (#3576) * updates to the ssh helper command docs (#3523) * updates to the ssh helper command docs * docs: Fix code block * docs: Add minor copy edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * docs: Add worker commands * docs: Update workers subcommands (#3598) * docs: Update worker subcommands * docs: Update certificate-authority subcommand * doc: Fix syntax for code refererences * docs: Add `users` commands (#3599) * docs: Add `users` commands * docs: Add more subcommands * docs: Add `target` commands (#3608) * Add command docs for 'credential-libraries' (#3610) * Add 'credential-stores' command docs (#3611) * Add 'credential-stores' command docs * Add the output message * Fix a typo * Fix a typo * Update the dummy token value * docs: Add `storage-bucket` commands - update (#3615) * docs: Add `sessions` commands (#3616) * docs: Add `session-recordings` commands (#3617) * Add 'credentials' command docs (#3619) * Add 'credentials' command docs * Fix typos * docs: Add `scopes` commands (#3620) * docs: Add `scopes` commands * docs: Fix typos * docs: Add `roles` commands (#3621) * docs: Add `roles` commands * docs: Add remaining subcommands * Add 'database' command docs (#3628) * Add 'database' command docs * Update the format inconsistency * docs: Add `managed-groups` commands (#3626) * docs: Add `managed-groups` commands * docs: Clarify description * docs: Add `hosts` commands (#3629) * docs: Add `host-sets` commands (#3630) * docs: Add `host-sets` commands * docs: Copy edits * docs: Add `host-catalogs` commands (#3632) * Add 'boundary groups' command docs (#3636) --------- Co-authored-by: kevin-loehfelm <37027455+kevin-loehfelm@users.noreply.github.com> Co-authored-by: kevin-loehfelm <kevin.loehfelm@hashicorp.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Florin Cătălin Țiucra-Popa <106736683+FlorinTP@users.noreply.github.com> Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
90 lines
2.6 KiB
Plaintext
90 lines
2.6 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: credential-libraries - Command
|
|
description: |-
|
|
The "credential-libraries" command lets Boundary admin create and manage credential libraries.
|
|
---
|
|
|
|
# credential-libraries
|
|
|
|
Command: `boundary credential-libraries`
|
|
|
|
The `credential-libraries` command lets you perform operations on Boundary credential library resources.
|
|
A credential library provides credentials for sessions.
|
|
All credentials returned by a library must be equivalent from an access control perspective.
|
|
|
|
A credential library is responsible for managing the lifecycle of the credentials it returns.
|
|
For dynamic secrets, this includes creation, renewal, and revocation.
|
|
For rotating credentials, this includes check-out, check-in, and rotation of secrets.
|
|
The system retrieves credentials from a library for a session and notifies the library when the session has been terminated.
|
|
A credential library belongs to a single credential store.
|
|
|
|
## Examples
|
|
|
|
The following example retrieves information for a credential library with the ID, `clvlt_QYnQPAjA24`:
|
|
|
|
```shell-session
|
|
$ boundary credential-libraries read -id clvlt_QYnQPAjA24
|
|
```
|
|
|
|
**Example output:**
|
|
|
|
<CodeBlockConfig hideClipboard>
|
|
|
|
```plaintext
|
|
Credential Library information:
|
|
Created Time: Fri, 18 Aug 2023 16:22:29 PDT
|
|
Credential Store ID: csvlt_5fvkRjCjou
|
|
ID: clvlt_QYnQPAjA24
|
|
Name: northwind dba
|
|
Type: vault-generic
|
|
Updated Time: Fri, 18 Aug 2023 16:22:29 PDT
|
|
Version: 1
|
|
|
|
Scope:
|
|
ID: p_tnqESc86qE
|
|
Name: db-project
|
|
Parent Scope ID: o_4VUR6ZATqW
|
|
Type: project
|
|
|
|
Authorized Actions:
|
|
no-op
|
|
read
|
|
update
|
|
delete
|
|
|
|
Attributes:
|
|
HTTP Method: GET
|
|
Path: database/creds/dba
|
|
```
|
|
|
|
</CodeBlockConfig>
|
|
|
|
## Usage
|
|
|
|
<CodeBlockConfig hideClipboard>
|
|
|
|
```shell-session
|
|
Usage: boundary credential-libraries [sub command] [options] [args]
|
|
|
|
# ...
|
|
|
|
Subcommands:
|
|
create Create a credential library
|
|
delete Delete a credential library
|
|
list List a credential library
|
|
read Read a credential library
|
|
update Update a credential library
|
|
```
|
|
|
|
</CodeBlockConfig>
|
|
|
|
For more information, examples, and usage, click on the name
|
|
of the subcommand in the sidebar or one of the links below:
|
|
|
|
- [create](/boundary/docs/commands/credential-libraries/create)
|
|
- [delete](/boundary/docs/commands/credential-libraries/delete)
|
|
- [list](/boundary/docs/commands/credential-libraries/list)
|
|
- [read](/boundary/docs/commands/credential-libraries/read)
|
|
- [update](/boundary/docs/commands/credential-libraries/update)
|