1KUBERNETES(1)(kubernetes) KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7
9 kubectl certificate deny - Deny a certificate signing request
10
11
12
14 kubectl certificate deny [OPTIONS]
15
16
17
19 Deny a certificate signing request.
20
21
22 kubectl certificate deny allows a cluster admin to deny a certificate
23 signing request (CSR). This action tells a certificate signing con‐
24 troller to not to issue a certificate to the requestor.
25
26
27
29 --allow-missing-template-keys=true If true, ignore any errors in
30 templates when a field or map key is missing in the template. Only ap‐
31 plies to golang and jsonpath output formats.
32
33
34 -f, --filename=[] Filename, directory, or URL to files identifying
35 the resource to update
36
37
38 --force=false Update the CSR even if it is already denied.
39
40
41 -k, --kustomize="" Process the kustomization directory. This flag
42 can't be used together with -f or -R.
43
44
45 -o, --output="" Output format. One of: (json, yaml, name, go-tem‐
46 plate, go-template-file, template, templatefile, jsonpath, jsonpath-as-
47 json, jsonpath-file).
48
49
50 -R, --recursive=false Process the directory used in -f, --filename
51 recursively. Useful when you want to manage related manifests organized
52 within the same directory.
53
54
55 --show-managed-fields=false If true, keep the managedFields when
56 printing objects in JSON or YAML format.
57
58
59 --template="" Template string or path to template file to use when
60 -o=go-template, -o=go-template-file. The template format is golang tem‐
61 plates [http://golang.org/pkg/text/template/#pkg-overview].
62
63
64
66 --as="" Username to impersonate for the operation. User could be a
67 regular user or a service account in a namespace.
68
69
70 --as-group=[] Group to impersonate for the operation, this flag
71 can be repeated to specify multiple groups.
72
73
74 --as-uid="" UID to impersonate for the operation.
75
76
77 --azure-container-registry-config="" Path to the file containing
78 Azure container registry configuration information.
79
80
81 --cache-dir="/builddir/.kube/cache" Default cache directory
82
83
84 --certificate-authority="" Path to a cert file for the certificate
85 authority
86
87
88 --client-certificate="" Path to a client certificate file for TLS
89
90
91 --client-key="" Path to a client key file for TLS
92
93
94 --cluster="" The name of the kubeconfig cluster to use
95
96
97 --context="" The name of the kubeconfig context to use
98
99
100 --insecure-skip-tls-verify=false If true, the server's certificate
101 will not be checked for validity. This will make your HTTPS connections
102 insecure
103
104
105 --kubeconfig="" Path to the kubeconfig file to use for CLI re‐
106 quests.
107
108
109 --match-server-version=false Require server version to match
110 client version
111
112
113 -n, --namespace="" If present, the namespace scope for this CLI
114 request
115
116
117 --password="" Password for basic authentication to the API server
118
119
120 --profile="none" Name of profile to capture. One of
121 (none|cpu|heap|goroutine|threadcreate|block|mutex)
122
123
124 --profile-output="profile.pprof" Name of the file to write the
125 profile to
126
127
128 --request-timeout="0" The length of time to wait before giving up
129 on a single server request. Non-zero values should contain a corre‐
130 sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
131 out requests.
132
133
134 -s, --server="" The address and port of the Kubernetes API server
135
136
137 --tls-server-name="" Server name to use for server certificate
138 validation. If it is not provided, the hostname used to contact the
139 server is used
140
141
142 --token="" Bearer token for authentication to the API server
143
144
145 --user="" The name of the kubeconfig user to use
146
147
148 --username="" Username for basic authentication to the API server
149
150
151 --version=false Print version information and quit
152
153
154 --warnings-as-errors=false Treat warnings received from the server
155 as errors and exit with a non-zero exit code
156
157
158
160 # Deny CSR 'csr-sqgzp'
161 kubectl certificate deny csr-sqgzp
162
163
164
165
167 kubectl-certificate(1),
168
169
170
172 January 2015, Originally compiled by Eric Paris (eparis at redhat dot
173 com) based on the kubernetes source material, but hopefully they have
174 been automatically generated since!
175
176
177
178Manuals User KUBERNETES(1)(kubernetes)