VAST on Cloud, voctool, is a small set of tools used by terraform to manage VAST On Cloud (VOC) resources.
It focuses on secure operations and supports AWS, GCP, and Azure via their official cloud SDKs and CLIs.
-
Download the binary:
- Go to the GitHub repository Releases page for voctool.
- Download the asset that matches your operating system and CPU architecture (for example: Linux
amd64, macOSarm64, etc.).
-
Install on macOS / Linux (adjust the filename as needed):
chmod +x voctool
# Verify
voctool --version- Install on Windows:
- Download the Windows binary from the Release assets.
- Rename it to
voctool.exeif needed. - Place it in a directory on your
PATH(for example,C:\Users\<you>\bin) and open a new terminal. - Run:
voctool --versionBasic usage pattern:
voctool [command] [flags]If you run voctool with no arguments, it prints help and a command tree.
-
cluster-cleanup
Clean up cluster-related resources leftover after the VoC cluster was destroyed using terraform
voctool cluster-cleanup --cluster-name <name> --cloud-provider <provider> [flags]
-
Supported providers:
AWSGCPAzure
-
Examples:
- GCP (cleans up matching routes in the given project):
voctool cluster-cleanup \ --cluster-name my-cluster \ --cloud-provider GCP \ --project-id my-gcp-project
- AWS (currently a no-op, reserved for future use):
voctool cluster-cleanup \ --cluster-name my-cluster \ --cloud-provider AWS
- Azure (currently a no-op, reserved for future use):
voctool cluster-cleanup \ --cluster-name my-cluster \ --cloud-provider Azure \ --subscription-id my-subscription-id
-
Flags:
--cluster-name(string, required): Cluster name or UID to clean up.--cloud-provider(string, required): One ofAWS,GCP, orAzure.--project-id(string, required forGCP): GCP project ID.--subscription-id(string, required forAzure): Azure subscription ID.
-
These flags are available for all commands:
--verbose,-v: Enable verbose output.--version: Show the voctool version.
voctool uses the official cloud SDKs and CLIs to authenticate. When a command requires access to a cloud provider:
- The tool automatically detects if you are authenticated.
- If authentication is missing or expired, voctool will:
- Explain what authentication command needs to run (such as a
gcloud,aws, orazlogin flow). - Ask for your explicit consent before running anything on your behalf.
- Explain what authentication command needs to run (such as a
- After authentication completes, the command re-validates access before changing any resources.
You do not need to manage credentials directly; just ensure the respective cloud CLIs are installed and available on your PATH.