Lists Juju credentials for a cloud.
juju list-credentials [options] [<cloud name>]
||false||Do not use web browser for authentication|
||Controller to operate in|
||tabular||Specify output format (json|tabular|yaml)|
||Specify an output file|
||false||Show secrets, applicable to yaml or json formats only|
juju credentials juju credentials aws juju credentials aws --client juju credentials --format yaml --show-secrets juju credentials --controller mycontroller juju credentials --controller mycontroller --client
This command list credentials from this client and credentials from a controller.
Locally stored credentials are client specific and
are used with
juju add-model. It’s paramount to understand that
different client devices may have different locally stored credentials
for the same user.
Remotely stored credentials or controller stored credentials are stored on the controller.
An arbitrary “credential name” is used to represent credentials, which are
added either via
juju add-credential or
Note that there can be multiple sets of credentials and, thus, multiple
Actual authentication material is exposed with the ‘–show-secrets’ option in json or yaml formats. Secrets are not shown in tabular format.
A controller, and subsequently created models, can be created with a
different set of credentials but any action taken within the model (e.g.:
juju add-unit) applies the credential used
to create that model. This model credential is stored on the controller.
A credential for ‘controller’ model is determined at bootstrap time and will be stored on the controller. It is considered to be controller default.
Recall that when a controller is created a ‘default’ model is also created. This model will use the controller default credential. To see details of your credentials use “juju show-credential” command.
When adding a new model, Juju will reuse the controller default credential.
To add a model that uses a different credential, specify a credential
from this client using --credential option. See
juju help add-model
for more information.
Credentials denoted with an asterisk ‘*’ are currently set as the user default for a given cloud.
Use --controller option to list credentials from a controller.
Use --client option to list credentials known locally on this client.