boundary 命令

常用示例

说明

boundary is the CLI for HashiCorp Boundary, a tool for secure remote access to infrastructure. It provides identity-based access to hosts and services without exposing networks or managing credentials directly. The connect command establishes sessions to targets. Protocol-specific helpers (ssh, postgres, rdp, http, kube) automatically configure client tools with proper credentials. For SSH, it spawns an ssh process with injected credentials; for databases, it provides connection strings. Authentication methods include password, OIDC, and LDAP. Credentials are stored in the system keyring or specified location. Use authenticate to log in and logout to clear credentials. Boundary uses a hierarchical scope model with global, organization, and project scopes. Use -recursive to list resources across all accessible scopes. Sessions maintain the connection state between client and target. Active sessions can be listed and canceled. Session recordings enable audit and compliance when configured.

参数

-target-id _id_

Target ID to connect to.

-target-name _name_

Target name (requires scope).

-target-scope-id _id_

Scope containing target.

-target-scope-name _name_

Scope name containing target.

-listen-port _port_

Local port for proxy connection.

-addr _address_

Boundary controller address.

-token _token_

Authentication token.

-token-name _name_

Token name for storage.

-scope-id _id_

Scope ID for operations.

-recursive

List resources recursively across scopes.

-format _format_

Output format: table, json.

-keyring-type _type_

Keyring type for credential storage.