lbcli get cluster-root-key

AI Tools

Retrieves the current (latest) cluster-level encryption root key.

lbcli get cluster-root-key [flags]

Examples:

# Retrieves the current (latest) cluster level encryption root key: lbcli -J $JWT get cluster-root-key --userPublicKey=<your-public-key> # Retrieves a specific generation cluster level encryption root key: lbcli -J $JWT get cluster-root-key --encryptingKeyGeneration=1 --userPublicKey=<your-public-key>

Flag

Short

Type

Default

Description

--help

-h

bool


Help for cluster-root-key.

--encryptingKeyGeneration


uint64


The generation of the key that you want to use. If not used, it will return the current key.

--userPublicKey


string


User RSA public key. Should be at least 3072 bits, and in base64 format (required).

This command returns the following fields for each snapshot. The default output format is human-readable. The human-readable output only shows some of these fields. The json/yaml output format is also supported and includes additional fields.

Field

Type

Description

encryptedKey

string

Cluster Encryption key encrypted with the given public key.

encryptingKeyGeneration

string

The generation of the exported key.