CLI configuration¶
Flags win over environment variables. Omitted flags are not serialized as defaults (argparse.SUPPRESS).
Globals¶
| Flag | Environment | Role |
|---|---|---|
--url |
EVE_IAC_URL |
HTTPS eve-iac-agent URL |
--token |
EVE_IAC_TOKEN |
Bearer token |
--ca-file |
EVE_IAC_CA_FILE |
Pinned CA certificate file |
--ca-pem |
EVE_IAC_CA_PEM |
Pinned CA PEM text |
--username |
EVE_IAC_USERNAME |
Login only |
--password |
EVE_IAC_PASSWORD |
Login only (prefer the env var in CI) |
--json |
SDK result JSON on stdout | |
--yes |
Confirm destroy / prune / replace / wipe | |
--timeout-ms |
Override the operation timeout |
--version prints the package version (X.Y.Z).
Precedence¶
- CLI flag if present
- Environment variable
- Empty / omitted
CA: if --ca-file / EVE_IAC_CA_FILE is set, that file is read. Otherwise --ca-pem / EVE_IAC_CA_PEM. There is no TOFU and no SecretStorage.
Non-interactive login¶
export EVE_IAC_URL=https://eve.example:8787
export EVE_IAC_CA_FILE=./ca.pem
export EVE_IAC_USERNAME=admin
export EVE_IAC_PASSWORD
eve-iac login --json
Human login omits the token on stdout. --json emits LoginData including token. Store that token as EVE_IAC_TOKEN for later commands. Do not print tokens in CI logs.
export EVE_IAC_TOKEN
eve-iac session
Project commands take a lab directory that contains .eve-iac.yml, plus optional --lab to override eve.lab (must start with /).
Full tables: CLI reference.