id       = "oci"
name     = "OCI CLI"
homepage = "https://docs.oracle.com/en-us/iaas/Content/API/Concepts/cliconcepts.htm"
description = "A small-footprint tool that you can use on its own or with the Console to complete Oracle Cloud Infrastructure tasks."
# Oracle's own square mark, the apple-touch-icon from oracle.com.
icon     = "https://www.oracle.com/apple-touch-icon.png"
executables   = ["oci"]

[dotfiles]

# "SDK and CLI Configuration File"
# (docs.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm): the config
# file is ~/.oci/config, an INI file of named profiles — on Windows the same
# path spelled "$($Env:UserProfile)\.oci\config", which resolves identically.
#
# "Configuring the CLI"
# (docs.oracle.com/en-us/iaas/Content/API/SDKDocs/cliconfigure.htm): the
# CLI-only rc file is ~/.oci/oci_cli_rc, overridable with OCI_CLI_RC_FILE. It
# holds default values for command options, command and parameter aliases and
# named JMESPath queries.
paths = ["~/.oci/config", "~/.oci/oci_cli_rc"]

exclude = []

# The API signing key `oci setup config` generates (its documented default
# path is ~/.oci/oci_api_key.pem), and the session directory
# `oci session authenticate` writes — ~/.oci/sessions/<profile>/token, with
# the key pair for that session beside it.
secret = ["~/.oci/oci_api_key.pem", "~/.oci/sessions/"]

# key_file and security_token_file are absolute paths into this machine's
# filesystem; the tenancy, user and region beside them are account facts that
# travel.
# Both point at this machine's own credential material, which the user needs
# back to rebuild the box and which means nothing anywhere else.
[[dotfiles.machine_lines]]
file  = "~/.oci/config"
match = { prefix = ["key_file", "security_token_file"] }
scope = "backup"

# pass_phrase is the passphrase of the private key. The documentation warns
# against putting it here at all, which is exactly why it has to be lifted out
# when it is there.
[[dotfiles.secret_paths]]
file  = "~/.oci/config"
match = { prefix = ["pass_phrase"] }