ContainerImage.Pinniped/site/content/docs/reference/cli.md

122 lines
4.7 KiB
Markdown
Raw Normal View History

---
title: Command-Line Options Reference
description: Reference for the `pinniped` command-line tool
cascade:
layout: docs
menu:
docs:
name: Command-Line Options
weight: 30
parent: reference
---
2021-04-01 19:15:23 +00:00
## pinniped get kubeconfig
2021-04-01 19:15:23 +00:00
Generate a Pinniped-based kubeconfig for a cluster
2021-04-01 19:15:23 +00:00
```
pinniped get kubeconfig [flags]
```
2021-04-01 19:15:23 +00:00
### Options
2021-04-01 19:15:23 +00:00
```
2021-06-02 15:22:13 +00:00
--concierge-api-group-suffix string Concierge API group suffix (default "pinniped.dev")
--concierge-authenticator-name string Concierge authenticator name (default: autodiscover)
--concierge-authenticator-type string Concierge authenticator type (e.g., 'webhook', 'jwt') (default: autodiscover)
--concierge-ca-bundle path Path to TLS certificate authority bundle (PEM format, optional, can be repeated) to use when connecting to the Concierge
--concierge-credential-issuer string Concierge CredentialIssuer object to use for autodiscovery (default: autodiscover)
--concierge-endpoint string API base for the Concierge endpoint
--concierge-mode mode Concierge mode of operation (default TokenCredentialRequestAPI)
--concierge-skip-wait Skip waiting for any pending Concierge strategies to become ready (default: false)
--credential-cache string Path to cluster-specific credentials cache
--generated-name-suffix string Suffix to append to generated cluster, context, user kubeconfig entries (default "-pinniped")
-h, --help help for kubeconfig
--kubeconfig string Path to kubeconfig file
--kubeconfig-context string Kubeconfig context name (default: current active context)
--no-concierge Generate a configuration which does not use the Concierge, but sends the credential to the cluster directly
--oidc-ca-bundle path Path to TLS certificate authority bundle (PEM format, optional, can be repeated)
--oidc-client-id string OpenID Connect client ID (default: autodiscover) (default "pinniped-cli")
--oidc-issuer string OpenID Connect issuer URL (default: autodiscover)
--oidc-listen-port uint16 TCP port for localhost listener (authorization code flow only)
--oidc-request-audience string Request a token with an alternate audience using RFC8693 token exchange
--oidc-scopes strings OpenID Connect scopes to request during login (default [offline_access,openid,pinniped:request-audience])
--oidc-session-cache string Path to OpenID Connect session cache file
--oidc-skip-browser During OpenID Connect login, skip opening the browser (just print the URL)
-o, --output string Output file path (default: stdout)
--skip-validation Skip final validation of the kubeconfig (default: false)
--static-token string Instead of doing an OIDC-based login, specify a static token
--static-token-env string Instead of doing an OIDC-based login, read a static token from the environment
--timeout duration Timeout for autodiscovery and validation (default 10m0s)
--upstream-identity-provider-name string The name of the upstream identity provider used during login with a Supervisor
--upstream-identity-provider-type string The type of the upstream identity provider used during login with a Supervisor (e.g. 'oidc', 'ldap')
```
2021-04-01 19:15:23 +00:00
### SEE ALSO
2021-04-01 19:15:23 +00:00
* [pinniped get]() - get
2021-04-01 19:15:23 +00:00
## pinniped help
2021-04-01 19:15:23 +00:00
Help about any command
2021-04-01 19:15:23 +00:00
### Synopsis
2021-04-01 19:15:23 +00:00
Help provides help for any command in the application.
Simply type pinniped help [path to command] for full details.
2021-04-01 19:15:23 +00:00
```
pinniped help [command] [flags]
```
2021-04-01 19:15:23 +00:00
### Options
2021-04-01 19:15:23 +00:00
```
-h, --help help for help
```
2021-04-01 19:15:23 +00:00
### SEE ALSO
2021-04-01 19:15:23 +00:00
* [pinniped]() - pinniped
2021-04-01 19:15:23 +00:00
## pinniped version
2021-04-01 19:15:23 +00:00
Print the version of this Pinniped CLI
2021-04-01 19:15:23 +00:00
```
pinniped version [flags]
```
2021-04-01 19:15:23 +00:00
### Options
2021-04-01 19:15:23 +00:00
```
-h, --help help for version
```
2021-04-01 19:15:23 +00:00
### SEE ALSO
2021-04-01 19:15:23 +00:00
* [pinniped]() - pinniped
2021-04-01 19:15:23 +00:00
## pinniped whoami
2021-04-01 19:15:23 +00:00
Print information about the current user
2021-04-01 19:15:23 +00:00
```
pinniped whoami [flags]
```
2021-04-01 19:15:23 +00:00
### Options
2021-04-01 19:15:23 +00:00
```
--api-group-suffix string Concierge API group suffix (default "pinniped.dev")
-h, --help help for whoami
--kubeconfig string Path to kubeconfig file
--kubeconfig-context string Kubeconfig context name (default: current active context)
-o, --output string Output format (e.g., 'yaml', 'json', 'text') (default "text")
```
2021-04-01 19:15:23 +00:00
### SEE ALSO
2021-04-01 19:15:23 +00:00
* [pinniped]() - pinniped