lbcli create logs tls-bundles

AI Tools

Creates a new TLS bundle.

Note

Log streaming is currently in tech preview.

Synopsis

Creates a new TLS bundle from PEM-encoded certificate files.

The CA certificate (--ca-pem) is required. The client certificate (--cert-pem) and private key (--key-pem) are optional. but must be provided together when a mutual TLS is required by the remote endpoint. Each flag accepts a path to a PEM file; the file contents are read and uploaded automatically.

lbcli create logs tls-bundles [flags]

Examples

# Create a bundle with CA cert only (one-way TLS)

lbcli -J $JWT create logs tls-bundles \

--name=loki-ca-bundle \

--ca-pem=/etc/ssl/certs/loki-ca.pem

# Create a bundle for mutual TLS

lbcli -J $JWT create logs tls-bundles \

--name=loki-mtls-bundle \

--ca-pem=/etc/ssl/certs/loki-ca.pem \

--cert-pem=/etc/ssl/certs/loki-client.pem \

--key-pem=/etc/ssl/private/loki-client-key.pem

Flag	Short	Type	Description
--help	-h	bool	Help for `tls-bundles`.
--name		string	Name of the TLS bundle (required).
--ca-pem		string	Path to the PEM file containing the CA certificate (required).
--cert-pem		string	Path to the PEM file containing the client certificate (optional, required for mTLS).
--key-pem		string	Path to the PEM file containing the client private key (optional, required for mTLS).

Last updated on

Was this page helpful?