CLI reference / fleet / key

stado fleet key

Invocation

stado fleet key <COMMAND>

Purpose

SSH host keys in the globally selected credential store

Required inputs and options

This command has no command-specific inputs or options.

Output and state effect

This command group selects one of the subcommands listed below; use its exact child invocation to perform an operation.

Refusals

• Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.

Subcommands

• add — Move an existing private key into the credential store (never printed)
• ls — List stored SSH host keys (metadata only)
• rm — Remove a target's SSH key from the credential store
• install — Install the stored public key into the target's authorized_keys
• check — Verify the stored key opens the channel to the target
• generate — Generate a fresh ed25519 pair for the target into the credential store
• rotate — Rotate the target's key end to end, with rollback on failure