Skip to main content
SSH certificate authorities (CAs) let you sign the host keys used by your compute instances so clients can trust them without manually pinning fingerprints. Once a CA is created, you can bind it to an instance via nscale instances create --ssh-ca-id. Aliases: ssh-cas, sshca

​
Subcommands

  • list — List SSH certificate authorities
  • get — Get SSH certificate authority details
  • create — Create a new SSH certificate authority
  • delete — Delete an SSH certificate authority

​
list

List SSH certificate authorities, optionally filtered by organization or project. 
nscale ssh-cas list [flags]

​
Flags

FlagDescription
—org stringOrganization ID
—project stringProject ID
—jsonEmit the full JSON payload (mutually exclusive with -q)
-q, —query stringArrayjq filter for value extraction (see Query output with -q)

​
Example

nscale ssh-cas list --org <org-id>

​
get

Get details for a specific SSH certificate authority. 
nscale ssh-cas get --id <ssh-ca-id> --org <org-id>

​
Flags

FlagDescription
—id stringSSH certificate authority ID
—org stringOrganization ID
—jsonEmit the full JSON payload (mutually exclusive with -q)
-q, —query stringArrayjq filter for value extraction (see Query output with -q)

​
create

Create a new SSH certificate authority. Accepts input from a JSON file or stdin. 
nscale ssh-cas create [flags]

​
Flags

FlagDescription
—org stringOrganization ID
-f, —file stringPath to a JSON file
—stdinRead JSON from standard input
—dry-runPreview the request payload without persisting
-y, —yesAutomatically confirm creation
—jsonEmit the full JSON payload (mutually exclusive with -q)
-q, —query stringArrayjq filter for value extraction (see Query output with -q)

​
Examples

nscale ssh-cas create --file sshca.json
nscale ssh-cas create --stdin < sshca.json
cat sshca.json | nscale ssh-cas create --stdin

​
delete

Delete an existing SSH certificate authority. 
nscale ssh-cas delete --id <ssh-ca-id> --org <org-id> [flags]

​
Flags

FlagDescription
--id stringSSH certificate authority ID
--org stringOrganization ID
--dry-runPreview the request payload without persisting
-y, --yesAutomatically confirm deletion

Instances

Bind a certificate authority when creating an instance with —ssh-ca-id.