📣
TiDB Cloud Premium is now in public preview. Unlimited growth, instant elasticity, advanced security for enterprise workloads. Try it out →

TiDB Cloud Filesystem Vault CLI Command Reference



Use ti fs-vault to manage secrets and delegated access in TiDB Cloud Filesystem.

Most secret-management commands identify a secret by its name, such as db-prod. replace-secret and run-with-secret instead require its canonical Vault path, /n/vault/<secret-name>. /n/vault/ is the root of the Vault namespace, so /n/vault/db-prod and the secret name db-prod identify the same secret.

Commands

CommandDescription
create-secretCreates a secret.
replace-secretReplaces a secret.
read-secretReads a secret.
list-secretsLists secrets.
delete-secretDeletes a secret.
create-grantDelegates limited access to a secret.
delete-grantRevokes delegated access.
list-audit-eventsLists Vault audit events.
run-with-secretInjects a secret into a process.
mount-vaultMounts a read-only Vault view.
unmount-vaultUnmounts a Vault view.

See also

Was this page helpful?