datumctl auth

Authenticate with Datum Cloud

Options

Flag	Type	Description
-h, --help	—	Help for auth.

Options inherited from parent commands

Flag	Type	Description
--as	string	Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
--as-group	stringArray	Group to impersonate for the operation. Can be repeated to specify multiple groups.
--as-uid	string	UID to impersonate for the operation.
--as-user-extra	stringArray	User extras to impersonate for the operation. Can be repeated to specify multiple values for the same key.
--certificate-authority	string	Path to a cert file for the certificate authority.
--disable-compression	—	If true, opt-out of response compression for all requests to the server.
--insecure-skip-tls-verify	—	If true, the server’s certificate will not be checked for validity. This will make your HTTPS connections insecure.
--log-flush-frequency	duration	Maximum number of seconds between log flushes. (default 5s)
-n, --namespace	string	If present, the namespace scope for this CLI request.
--organization	string	Organization name.
--platform-wide	—	Access the platform root instead of a project or organization control plane.
--project	string	Project name.
--request-timeout	string	The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don’t timeout requests. (default "0")
-s, --server	string	The address and port of the Kubernetes API server.
--tls-server-name	string	Server name to use for server certificate validation. If not provided, the hostname used to contact the server is used.
--token	string	Bearer token for authentication to the API server.
--user	string	The name of the kubeconfig user to use.
-v, --v	Level	Number for the log level verbosity.
--vmodule	moduleSpec	Comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format).

See also

• datumctl - A CLI for interacting with the Datum platform
• datumctl auth can-i - Check whether an action is allowed
• datumctl auth get-token - Retrieve access token for active user (raw or K8s format)
• datumctl auth list - List locally authenticated users
• datumctl auth login - Authenticate with Datum Cloud via OAuth2 PKCE flow
• datumctl auth logout - Remove local authentication credentials for a specified user or all users
• datumctl auth switch - Set the active authenticated user session
• datumctl auth update-kubeconfig - Update the kubeconfig file
• datumctl auth whoami - Experimental: Check self subject attributes

Auto generated by spf13/cobra on 24-Feb-2026