1OC CREATE(1) June 2016 OC CREATE(1)
2
3
4
6 oc create user - Manually create a user (only needed if automatic cre‐
7 ation is disabled).
8
9
10
12 oc create user [OPTIONS]
13
14
15
17 This command can be used to create a user object.
18
19
20 Typically, users are created automatically during login. If automatic
21 creation is disabled (by using the "lookup" mapping method), users must
22 be created manually.
23
24
25 Corresponding identity and useridentitymapping objects must also be
26 created to allow logging in as the created user.
27
28
29
31 --allow-missing-template-keys=true
32 If true, ignore any errors in templates when a field or map key is
33 missing in the template. Only applies to golang and jsonpath output
34 formats.
35
36
37 --dry-run=false
38 If true, only print the object that would be sent, without sending
39 it.
40
41
42 --full-name=""
43 Display name of the user
44
45
46 -o, --output=""
47 Output format. One of: json|yaml|name|go-template|go-tem‐
48 plate-file|templatefile|template|jsonpath-file|jsonpath.
49
50
51 --template=""
52 Template string or path to template file to use when -o=go-tem‐
53 plate, -o=go-template-file. The template format is golang templates [
54 ⟨http://golang.org/pkg/text/template/#pkg-overview⟩].
55
56
57
59 --allow_verification_with_non_compliant_keys=false
60 Allow a SignatureVerifier to use keys which are technically
61 non-compliant with RFC6962.
62
63
64 --alsologtostderr=false
65 log to standard error as well as files
66
67
68 --application_metrics_count_limit=100
69 Max number of application metrics to store (per container)
70
71
72 --as=""
73 Username to impersonate for the operation
74
75
76 --as-group=[]
77 Group to impersonate for the operation, this flag can be repeated
78 to specify multiple groups.
79
80
81 --azure-container-registry-config=""
82 Path to the file containing Azure container registry configuration
83 information.
84
85
86 --boot_id_file="/proc/sys/kernel/random/boot_id"
87 Comma-separated list of files to check for boot-id. Use the first
88 one that exists.
89
90
91 --cache-dir="/builddir/.kube/http-cache"
92 Default HTTP cache directory
93
94
95 --certificate-authority=""
96 Path to a cert file for the certificate authority
97
98
99 --client-certificate=""
100 Path to a client certificate file for TLS
101
102
103 --client-key=""
104 Path to a client key file for TLS
105
106
107 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
108 CIDRs opened in GCE firewall for LB traffic proxy health checks
109
110
111 --cluster=""
112 The name of the kubeconfig cluster to use
113
114
115 --container_hints="/etc/cadvisor/container_hints.json"
116 location of the container hints file
117
118
119 --containerd="unix:///var/run/containerd.sock"
120 containerd endpoint
121
122
123 --context=""
124 The name of the kubeconfig context to use
125
126
127 --default-not-ready-toleration-seconds=300
128 Indicates the tolerationSeconds of the toleration for
129 notReady:NoExecute that is added by default to every pod that does not
130 already have such a toleration.
131
132
133 --default-unreachable-toleration-seconds=300
134 Indicates the tolerationSeconds of the toleration for unreach‐
135 able:NoExecute that is added by default to every pod that does not
136 already have such a toleration.
137
138
139 --docker="unix:///var/run/docker.sock"
140 docker endpoint
141
142
143 --docker-tls=false
144 use TLS to connect to docker
145
146
147 --docker-tls-ca="ca.pem"
148 path to trusted CA
149
150
151 --docker-tls-cert="cert.pem"
152 path to client certificate
153
154
155 --docker-tls-key="key.pem"
156 path to private key
157
158
159 --docker_env_metadata_whitelist=""
160 a comma-separated list of environment variable keys that needs to
161 be collected for docker containers
162
163
164 --docker_only=false
165 Only report docker containers in addition to root stats
166
167
168 --docker_root="/var/lib/docker"
169 DEPRECATED: docker root is read from docker info (this is a fall‐
170 back, default: /var/lib/docker)
171
172
173 --enable_load_reader=false
174 Whether to enable cpu load reader
175
176
177 --event_storage_age_limit="default=24h"
178 Max length of time for which to store events (per type). Value is a
179 comma separated list of key values, where the keys are event types
180 (e.g.: creation, oom) or "default" and the value is a duration. Default
181 is applied to all non-specified event types
182
183
184 --event_storage_event_limit="default=100000"
185 Max number of events to store (per type). Value is a comma sepa‐
186 rated list of key values, where the keys are event types (e.g.: cre‐
187 ation, oom) or "default" and the value is an integer. Default is
188 applied to all non-specified event types
189
190
191 --global_housekeeping_interval=0
192 Interval between global housekeepings
193
194
195 --housekeeping_interval=0
196 Interval between container housekeepings
197
198
199 --httptest.serve=""
200 if non-empty, httptest.NewServer serves on this address and blocks
201
202
203 --insecure-skip-tls-verify=false
204 If true, the server's certificate will not be checked for validity.
205 This will make your HTTPS connections insecure
206
207
208 --kubeconfig=""
209 Path to the kubeconfig file to use for CLI requests.
210
211
212 --log-flush-frequency=0
213 Maximum number of seconds between log flushes
214
215
216 --log_backtrace_at=:0
217 when logging hits line file:N, emit a stack trace
218
219
220 --log_cadvisor_usage=false
221 Whether to log the usage of the cAdvisor container
222
223
224 --log_dir=""
225 If non-empty, write log files in this directory
226
227
228 --logtostderr=true
229 log to standard error instead of files
230
231
232 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
233 Comma-separated list of files to check for machine-id. Use the
234 first one that exists.
235
236
237 --match-server-version=false
238 Require server version to match client version
239
240
241 -n, --namespace=""
242 If present, the namespace scope for this CLI request
243
244
245 --request-timeout="0"
246 The length of time to wait before giving up on a single server
247 request. Non-zero values should contain a corresponding time unit (e.g.
248 1s, 2m, 3h). A value of zero means don't timeout requests.
249
250
251 -s, --server=""
252 The address and port of the Kubernetes API server
253
254
255 --stderrthreshold=2
256 logs at or above this threshold go to stderr
257
258
259 --storage_driver_buffer_duration=0
260 Writes in the storage driver will be buffered for this duration,
261 and committed to the non memory backends as a single transaction
262
263
264 --storage_driver_db="cadvisor"
265 database name
266
267
268 --storage_driver_host="localhost:8086"
269 database host:port
270
271
272 --storage_driver_password="root"
273 database password
274
275
276 --storage_driver_secure=false
277 use secure connection with database
278
279
280 --storage_driver_table="stats"
281 table name
282
283
284 --storage_driver_user="root"
285 database username
286
287
288 --token=""
289 Bearer token for authentication to the API server
290
291
292 --user=""
293 The name of the kubeconfig user to use
294
295
296 -v, --v=0
297 log level for V logs
298
299
300 --version=false
301 Print version information and quit
302
303
304 --vmodule=
305 comma-separated list of pattern=N settings for file-filtered log‐
306 ging
307
308
309
311 # Create a user with the username "ajones" and the display name "Adam Jones"
312 oc create user ajones --full-name="Adam Jones"
313
314
315
316
318 oc-create(1),
319
320
321
323 June 2016, Ported from the Kubernetes man-doc generator
324
325
326
327Openshift Openshift CLI User Manuals OC CREATE(1)