voltctl

The operator CLI for Volt — the Sovereign Inference Cloud. Manage orgs, API keys, pods, network policy, racks, and attestation. Built for on-call: every disaster-playbook action is a subcommand you can run from a phone-tethered laptop at 2am.

Public, Apache-2.0. Internally it uses a thin stdlib API client; it migrates to the public sdk-go when that ships.

Install

# Homebrew (tap)
brew install thevoltcloud/tap/voltctl

# Go
go install github.com/thevoltcloud/voltctl/cmd/voltctl@latest

# deb/rpm published to Volt's apt/yum repos (see release/)

Auth

export VOLT_API_KEY=volt_sk_live_...
export VOLT_BASE_URL=https://api.voltcloud.ai   # optional; this is the default
# or pass --api-key / --base-url per command

Commands

Command	What	Playbook
voltctl org list|get|create|delete	Orgs (tenants)	—
voltctl key list|issue|revoke --org <id>	API keys	revoke = Scenario 7 (<30s global)
voltctl pod status|drain|power-status <id>	Pod ops	Scenario 1
voltctl policy apply <pod> -f policy.json	Emergency Cilium policy	Scenario 3
voltctl attest --rack <id>	Rack attestation report	Scenario 9
voltctl rack list|get	Vault racks	—
voltctl version	Version	—

Add -o json to any command for machine-readable output (default is a table).

Examples

voltctl org list
voltctl key revoke key-9 --org org-acme          # global, effective in <30s
voltctl pod drain pod-iad-001                     # cordon + drain
voltctl policy apply pod-iad-001 -f lockdown.json # emergency egress lockdown
voltctl attest --rack rack-iad-7 -o json          # measured-boot verdicts

Development

go build ./... && go test ./...
go run ./cmd/voltctl --help
golangci-lint run

Conventions + contributing: thevoltcloud/handbook, thevoltcloud/.github. Apache-2.0 — see LICENSE.