Help Center> Koo Command Line Interface> FAQs> Other> How Do I Use KooCLI in Non-configuration Mode?
Updated on 2023-10-16 GMT+08:00

How Do I Use KooCLI in Non-configuration Mode?

When using KooCLI in non-configuration mode, you do not need to pass your authentication information through a profile. Instead, directly pass your authentication parameters in commands. This mode enables you to use the CLI conveniently without adding any profiles. For details, see Using KooCLI in Non-configuration Mode.

Note the following when using the KooCLI in this mode:

  • Using an AK/SK in non-configuration mode
    • Access key (permanent AK/SK)
      • When cloud service APIs are called using a permanent AK/SK, pass both the access key ID (cli-access-key) and secret access key (cli-secret-key) in commands for authentication.
      • If a global service is to be accessed, the ID (cli-domain-id) of the account used to create the IAM user is also required for authentication. If the ID is not passed to the command, KooCLI automatically obtains it based on the user authentication information. However, if the cli-access-key or cli-secret-key parameter is missing or the cli-domain-id parameter fails to be automatically obtained, the following error message is displayed:
        • [USE_ERROR] Parameters cli-access-key,cli-secret-key must be specified at the same time.
        • [USE_ERROR] cli-domain-id is required for access to global services using AK/SK. Add this parameter or run `hcloud configure set` to configure it.
      • If both an AK/SK and a profile (cli-profile) are specified in a command, the AK/SK is preferentially used for authentication.
    • Temporary security credentials (temporary AK/SK and SecurityToken)
      • Using a temporary AK/SK and SecurityToken to call cloud service APIs through KooCLI is similar to using a permanent AK/SK. If both an AK/SK (cli-access-key/cli-secret-key) and SecurityToken (cli-security-token) are passed in the command, the AK/SK is considered temporary.
      • If a global service is to be accessed, the ID (cli-domain-id) of the account used to create the IAM user is also required for authentication. If the ID is not passed to the command, KooCLI automatically obtains it based on the user authentication information. However, if the cli-access-key or cli-secret-key parameter is missing or the cli-domain-id parameter fails to be automatically obtained, the following error message is displayed:
        • [USE_ERROR] Parameters cli-access-key,cli-secret-key must be specified at the same time.
        • [USE_ERROR] cli-domain-id is required for access to global services using AK/SK. Add this parameter or run `hcloud configure set` to configure it.
      • If a temporary AK/SK, SecurityToken, and profile (cli-profile) are specified in a command, the AK/SK and SecurityToken are preferentially used for authentication.
  • Using an ECS agency in non-configuration mode
    • This authentication mode applies only when you use KooCLI on an ECS.
    • To use this mode, create a cloud service agency to delegate ECS to use the CLI on the IAM console, and add the agency in the Management Information > Agency area of the ECS details page. For details, see Cloud Service Delegation.

Other FAQs

more