From a53728760195e56a312576bbb67dadca5d4e1c60 Mon Sep 17 00:00:00 2001 From: Margo Crawford Date: Fri, 19 Mar 2021 14:34:35 -0700 Subject: [PATCH] Regenerate cli.md based on output of help message --- site/content/docs/reference/cli.md | 32 ++++++++++++++++++++++++------ 1 file changed, 26 insertions(+), 6 deletions(-) diff --git a/site/content/docs/reference/cli.md b/site/content/docs/reference/cli.md index 15d9691b..9cb92b33 100644 --- a/site/content/docs/reference/cli.md +++ b/site/content/docs/reference/cli.md @@ -32,8 +32,7 @@ pinniped get kubeconfig [flags] - `-h`, `--help`: - help for kubeconfig - + help for kubeconfig - `--concierge-api-group-suffix string`: Concierge API group suffix (default "pinniped.dev") @@ -43,9 +42,21 @@ pinniped get kubeconfig [flags] - `--concierge-authenticator-type string`: Concierge authenticator type (e.g., 'webhook', 'jwt') (default: autodiscover) -- `--concierge-mode`: +- `--concierge-ca-bundle path`: -Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestAPI')(default: TokenCredentialRequestAPI) + Path to TLS certificate authority bundle (PEM format, optional, can be repeated) to use when connecting to the Concierge +- `--concierge-credential-issuer string`: + + Concierge CredentialIssuer object to use for autodiscovery (default: autodiscover) +- `--concierge-endpoint string`: + + API base for the Concierge endpoint +- `--concierge-mode mode`: + + Concierge mode of operation (default TokenCredentialRequestAPI) +- `--concierge-skip-wait`: + + Skip waiting for any pending Concierge strategies to become ready (default: false) - `--kubeconfig string`: Path to kubeconfig file @@ -54,8 +65,8 @@ Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestA Kubeconfig context name (default: current active context) - `--no-concierge`: - Generate a configuration which does not use the concierge, but sends the credential to the cluster directly -- `--oidc-ca-bundle strings`: + Generate a configuration which does not use the Concierge, but sends the credential to the cluster directly +- `--oidc-ca-bundle path`: Path to TLS certificate authority bundle (PEM format, optional, can be repeated) - `--oidc-client-id string`: @@ -79,9 +90,18 @@ Concierge mode of operation (e.g. 'ImpersonationProxy', 'TokenCredentialRequestA - `--oidc-skip-browser`: During OpenID Connect login, skip opening the browser (just print the URL) +- `-o`, `--output string`: + + Output file path (default: stdout) +- `--skip-validation`: + + Skip final validation of the kubeconfig (default: false) - `--static-token string`: Instead of doing an OIDC-based login, specify a static token - `--static-token-env string`: Instead of doing an OIDC-based login, read a static token from the environment +- `--timeout duration`: + + Timeout for autodiscovery and validation (default 10m0s)