Infisical SSH lets you issue SSH credentials to clients to provide short-lived, secure SSH access to infrastructure.
This command enables you to obtain SSH credentials used to access a remote host. We recommend using the connect sub-command which handles the full workflow of issuing credentials and establishing an SSH connection in one step.
This command is used to connect to an SSH host using issued credentials. It will automatically issue credentials and either add them to your SSH agent or write them to disk before establishing an SSH connection.
The hostname of the SSH host to connect to. If not provided, you will be prompted to select from available hosts.
The login user for the SSH connection. If not provided, you will be prompted to select from available login users.
Whether to write the Host CA public key to ~/.ssh/known_hosts if it doesn’t already exist.
Default value: true
The path to write the SSH credentials to such as ~/.ssh, ./some_folder, ./some_folder/id_rsa-cert.pub. If not provided, the credentials will be added to the SSH agent and used to establish an interactive SSH connection.
Use a machine identity access token
This command is used to register a new SSH host with Infisical.
This command can be used with the --write-user-ca-to-file, --write-host-cert-to-file, and --configure-sshd flags
to also configure the host’s SSH daemon with the necessary certificate authority and host certificate settings.