mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-02-04 03:52:41 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
Files
698bffc2ad43395e48cefe20da2782a2dd0c8f48
pinniped/site/content/docs/reference/cli.md
Matt Moyer 7a1d92a8d4 Restructure docs into new layout. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-23 11:11:07 -06:00

2.1 KiB
Raw Blame History

title, description, cascade, menu
title description cascade menu
Command-Line Options Reference Reference for the `pinniped` command-line tool
layout
docs
docs
name weight parent
Command-Line Options 30 reference

pinniped version

Print the version of this Pinniped CLI.

pinniped version [flags]

  • -h, --help:

    help for kubeconfig

pinniped get kubeconfig

Generate a Pinniped-based kubeconfig for a cluster.

pinniped get kubeconfig [flags]

  • -h, --help:

    help for kubeconfig

  • --concierge-api-group-suffix string:

    Concierge API group suffix (default "pinniped.dev")

  • --concierge-authenticator-name string:

    Concierge authenticator name (default: autodiscover)

  • --concierge-authenticator-type string:

    Concierge authenticator type (e.g., 'webhook', 'jwt') (default: autodiscover)

  • --kubeconfig string:

    Path to kubeconfig file

  • --kubeconfig-context string:

    Kubeconfig context name (default: current active context)

  • --no-concierge:

    Generate a configuration which does not use the concierge, but sends the credential to the cluster directly

  • --oidc-ca-bundle strings:

    Path to TLS certificate authority bundle (PEM format, optional, can be repeated)

  • --oidc-client-id string:

    OpenID Connect client ID (default: autodiscover) (default "pinniped-cli")

  • --oidc-issuer string:

    OpenID Connect issuer URL (default: autodiscover)

  • --oidc-listen-port uint16:

    TCP port for localhost listener (authorization code flow only)

  • --oidc-request-audience string:

    Request a token with an alternate audience using RFC8693 token exchange

  • --oidc-scopes strings:

    OpenID Connect scopes to request during login (default [offline_access,openid,pinniped:request-audience])

  • --oidc-session-cache string:

    Path to OpenID Connect session cache file

  • --oidc-skip-browser:

    During OpenID Connect login, skip opening the browser (just print the URL)

  • --static-token string:

    Instead of doing an OIDC-based login, specify a static token

  • --static-token-env string:

    Instead of doing an OIDC-based login, read a static token from the environment