1OC SECRETS(1) June 2016 OC SECRETS(1)
2
6 oc secrets add - DEPRECATED: secrets link
7
11 oc secrets add [OPTIONS]
12
16 DEPRECATED: This command has been moved to "oc secrets link"
17
21 --for=[mount]
22 type of secret to link: mount or pull
23
27 --allow_verification_with_non_compliant_keys=false
28 Allow a SignatureVerifier to use keys which are technically
29 non-compliant with RFC6962.
30 --alsologtostderr=false
33 log to standard error as well as files
34 --application_metrics_count_limit=100
37 Max number of application metrics to store (per container)
38 --as=""
41 Username to impersonate for the operation
42 --as-group=[]
45 Group to impersonate for the operation, this flag can be repeated
46 to specify multiple groups.
47 --azure-container-registry-config=""
50 Path to the file containing Azure container registry configuration
51 information.
52 --boot_id_file="/proc/sys/kernel/random/boot_id"
55 Comma-separated list of files to check for boot-id. Use the first
56 one that exists.
57 --cache-dir="/builddir/.kube/http-cache"
60 Default HTTP cache directory
61 --certificate-authority=""
64 Path to a cert file for the certificate authority
65 --client-certificate=""
68 Path to a client certificate file for TLS
69 --client-key=""
72 Path to a client key file for TLS
73 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
76 CIDRs opened in GCE firewall for LB traffic proxy health checks
77 --cluster=""
80 The name of the kubeconfig cluster to use
81 --container_hints="/etc/cadvisor/container_hints.json"
84 location of the container hints file
85 --containerd="unix:///var/run/containerd.sock"
88 containerd endpoint
89 --context=""
92 The name of the kubeconfig context to use
93 --default-not-ready-toleration-seconds=300
96 Indicates the tolerationSeconds of the toleration for
97 notReady:NoExecute that is added by default to every pod that does not
98 already have such a toleration.
99 --default-unreachable-toleration-seconds=300
102 Indicates the tolerationSeconds of the toleration for unreach‐
103 able:NoExecute that is added by default to every pod that does not
104 already have such a toleration.
105 --docker="unix:///var/run/docker.sock"
108 docker endpoint
109 --docker-tls=false
112 use TLS to connect to docker
113 --docker-tls-ca="ca.pem"
116 path to trusted CA
117 --docker-tls-cert="cert.pem"
120 path to client certificate
121 --docker-tls-key="key.pem"
124 path to private key
125 --docker_env_metadata_whitelist=""
128 a comma-separated list of environment variable keys that needs to
129 be collected for docker containers
130 --docker_only=false
133 Only report docker containers in addition to root stats
134 --docker_root="/var/lib/docker"
137 DEPRECATED: docker root is read from docker info (this is a fall‐
138 back, default: /var/lib/docker)
139 --enable_load_reader=false
142 Whether to enable cpu load reader
143 --event_storage_age_limit="default=24h"
146 Max length of time for which to store events (per type). Value is a
147 comma separated list of key values, where the keys are event types
148 (e.g.: creation, oom) or "default" and the value is a duration. Default
149 is applied to all non-specified event types
150 --event_storage_event_limit="default=100000"
153 Max number of events to store (per type). Value is a comma sepa‐
154 rated list of key values, where the keys are event types (e.g.: cre‐
155 ation, oom) or "default" and the value is an integer. Default is
156 applied to all non-specified event types
157 --global_housekeeping_interval=0
160 Interval between global housekeepings
161 --housekeeping_interval=0
164 Interval between container housekeepings
165 --httptest.serve=""
168 if non-empty, httptest.NewServer serves on this address and blocks
169 --insecure-skip-tls-verify=false
172 If true, the server's certificate will not be checked for validity.
173 This will make your HTTPS connections insecure
174 --kubeconfig=""
177 Path to the kubeconfig file to use for CLI requests.
178 --log-flush-frequency=0
181 Maximum number of seconds between log flushes
182 --log_backtrace_at=:0
185 when logging hits line file:N, emit a stack trace
186 --log_cadvisor_usage=false
189 Whether to log the usage of the cAdvisor container
190 --log_dir=""
193 If non-empty, write log files in this directory
194 --logtostderr=true
197 log to standard error instead of files
198 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
201 Comma-separated list of files to check for machine-id. Use the
202 first one that exists.
203 --match-server-version=false
206 Require server version to match client version
207 -n, --namespace=""
210 If present, the namespace scope for this CLI request
211 --request-timeout="0"
214 The length of time to wait before giving up on a single server
215 request. Non-zero values should contain a corresponding time unit (e.g.
216 1s, 2m, 3h). A value of zero means don't timeout requests.
217 -s, --server=""
220 The address and port of the Kubernetes API server
221 --stderrthreshold=2
224 logs at or above this threshold go to stderr
225 --storage_driver_buffer_duration=0
228 Writes in the storage driver will be buffered for this duration,
229 and committed to the non memory backends as a single transaction
230 --storage_driver_db="cadvisor"
233 database name
234 --storage_driver_host="localhost:8086"
237 database host:port
238 --storage_driver_password="root"
241 database password
242 --storage_driver_secure=false
245 use secure connection with database
246 --storage_driver_table="stats"
249 table name
250 --storage_driver_user="root"
253 database username
254 --token=""
257 Bearer token for authentication to the API server
258 --user=""
261 The name of the kubeconfig user to use
262 -v, --v=0
265 log level for V logs
266 --version=false
269 Print version information and quit
270 --vmodule=
273 comma-separated list of pattern=N settings for file-filtered log‐
274 ging
275
279 # Add an image pull secret to a service account to automatically use it for pulling pod images:
280 oc serviceaccount-name pull-secret --for=pull
281 # Add an image pull secret to a service account to automatically use it for both pulling and pushing build images:
283 oc builder builder-image-secret --for=pull,mount
284 # If the cluster's serviceAccountConfig is operating with limitSecretReferences: True, secrets must be added to the pod's service account whitelist in order to be available to the pod:
286 oc pod-sa pod-secret
287
292 oc-secrets(1),
293
297 June 2016, Ported from the Kubernetes man-doc generator
298Openshift Openshift CLI User Manuals OC SECRETS(1)