Source and Credential Commands

This domain covers source creation and credential/OAuth commands.

Source Commands

Command group: dodil k3 source

Current CLI surface is minimal and supports create only.

Persistent flag:

--bucket, -b (required by command behavior)

Subcommand	Args	Important flags
`create`	`<name>`	`--bucket`, `-b`

Example:


dodil k3 source create contracts-source --bucket kb-dev

Credential Commands

Command group: dodil k3 credential (alias: cred)

Subcommand	Args	Important flags
`store`	`<display-name>`	none
`oauth-url`	none	`--provider-id`, `-p`
`oauth-exchange`	none	`--provider-id`, `--code`, `--redirect-uri`, `--state`, `--source-id`, `--display-name`

Flag Details

Flag	Required	Meaning
`--provider-id`	yes for OAuth commands	Provider identifier (normalized internally)
`--code`	yes for `oauth-exchange`	OAuth authorization code
`--redirect-uri`	no	Redirect URI used in auth request
`--state`	no	CSRF/trace state value
`--source-id`	no	Attach credential to a source
`--display-name`	no	Friendly credential name

Examples


dodil k3 credential store "ceph-primary"
 
dodil k3 credential oauth-url --provider-id google_drive -o json
 
dodil k3 credential oauth-exchange \
  --provider-id google_drive \
  --code "<oauth_code>" \
  --redirect-uri "https://app.example.com/k3/oauth/callback" \
  --display-name "gdrive-main"

Provider ID Input Tips

Provider IDs are normalized (case-insensitive, dashes become underscores), so all of these map cleanly:

google_drive
GOOGLE-DRIVE
source_provider_google_drive

Common Use Cases

Quick source creation for internal S3/default ingest path.
OAuth onboarding before creating rich external source definitions via API.
Credential rotation and validation workflows.

Next: Pipeline, Template, and Ingest Commands