lbcli create logs tls-bundles

Creates a new TLS bundle.

Log streaming is currently in tech preview.

Synopsis

Creates a new TLS bundle from PEM-encoded certificate files.

The CA certificate (--ca-pem) is required. The client certificate (--cert-pem) and private key (--key-pem) are optional. but must be provided together when a mutual TLS is required by the remote endpoint. Each flag accepts a path to a PEM file; the file contents are read and uploaded automatically.

Bash
    
xxxxxxxxxx
 
lbcli create logs tls-bundles [flags]
Copy

Examples

Bash
    
xxxxxxxxxx
 
# Create a bundle with CA cert only (one-way TLS)lbcli -J $JWT create logs tls-bundles \  --name=loki-ca-bundle \  --ca-pem=/etc/ssl/certs/loki-ca.pem # Create a bundle for mutual TLSlbcli -J $JWT create logs tls-bundles \  --name=loki-mtls-bundle \  --ca-pem=/etc/ssl/certs/loki-ca.pem \  --cert-pem=/etc/ssl/certs/loki-client.pem \  --key-pem=/etc/ssl/private/loki-client-key.pem
Copy

Flag	Short	Type	Description
--help	-h	bool	Help for `tls-bundles`.
--name		string	Name of the TLS bundle (required).
--ca-pem		string	Path to the PEM file containing the CA certificate (required).
--cert-pem		string	Path to the PEM file containing the client certificate (optional, required for mTLS).
--key-pem		string	Path to the PEM file containing the client private key (optional, required for mTLS).

Last updated on

Was this page helpful?