1OC SET(1) June 2016 OC SET(1)
2
6 oc set build-secret - Update a build secret on a build config
7
11 oc set build-secret [OPTIONS]
12
16 Set or remove a build secret on a build config
17 A build config can reference a secret to push or pull images from pri‐
20 vate registries or to access private source repositories.
21 Specify the type of secret being set by using the --push, --pull, or
24 --source flags. A secret reference can be removed by using --remove
25 flag.
26 A label selector may be specified with the --selector flag to select
29 the build configs on which to set or remove secrets. Alternatively, all
30 build configs in the namespace can be selected with the --all flag.
31
35 --all=false
36 If true, select all build configs in the namespace
37 --allow-missing-template-keys=true
40 If true, ignore any errors in templates when a field or map key is
41 missing in the template. Only applies to golang and jsonpath output
42 formats.
43 --dry-run=false
46 If true, only print the object that would be sent, without sending
47 it.
48 -f, --filename=[]
51 Filename, directory, or URL to files to use to edit the resource
52 --local=false
55 If true, set build-secret will NOT contact api-server but run
56 locally.
57 -o, --output=""
60 Output format. One of: json|yaml|name|go-template-file|template‐
61 file|template|go-template|jsonpath|jsonpath-file.
62 --pull=false
65 If true, set the pull secret on a build config
66 --push=false
69 If true, set the push secret on a build config
70 -R, --recursive=false
73 Process the directory used in -f, --filename recursively. Useful
74 when you want to manage related manifests organized within the same
75 directory.
76 --remove=false
79 If true, remove the build secret.
80 -l, --selector=""
83 Selector (label query) to filter build configs
84 --source=false
87 If true, set the source secret on a build config
88 --template=""
91 Template string or path to template file to use when -o=go-tem‐
92 plate, -o=go-template-file. The template format is golang templates [
93 ⟨http://golang.org/pkg/text/template/#pkg-overview⟩].
94
98 --allow_verification_with_non_compliant_keys=false
99 Allow a SignatureVerifier to use keys which are technically
100 non-compliant with RFC6962.
101 --alsologtostderr=false
104 log to standard error as well as files
105 --application_metrics_count_limit=100
108 Max number of application metrics to store (per container)
109 --as=""
112 Username to impersonate for the operation
113 --as-group=[]
116 Group to impersonate for the operation, this flag can be repeated
117 to specify multiple groups.
118 --azure-container-registry-config=""
121 Path to the file containing Azure container registry configuration
122 information.
123 --boot_id_file="/proc/sys/kernel/random/boot_id"
126 Comma-separated list of files to check for boot-id. Use the first
127 one that exists.
128 --cache-dir="/builddir/.kube/http-cache"
131 Default HTTP cache directory
132 --certificate-authority=""
135 Path to a cert file for the certificate authority
136 --client-certificate=""
139 Path to a client certificate file for TLS
140 --client-key=""
143 Path to a client key file for TLS
144 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
147 CIDRs opened in GCE firewall for LB traffic proxy health checks
148 --cluster=""
151 The name of the kubeconfig cluster to use
152 --container_hints="/etc/cadvisor/container_hints.json"
155 location of the container hints file
156 --containerd="unix:///var/run/containerd.sock"
159 containerd endpoint
160 --context=""
163 The name of the kubeconfig context to use
164 --default-not-ready-toleration-seconds=300
167 Indicates the tolerationSeconds of the toleration for
168 notReady:NoExecute that is added by default to every pod that does not
169 already have such a toleration.
170 --default-unreachable-toleration-seconds=300
173 Indicates the tolerationSeconds of the toleration for unreach‐
174 able:NoExecute that is added by default to every pod that does not
175 already have such a toleration.
176 --docker="unix:///var/run/docker.sock"
179 docker endpoint
180 --docker-tls=false
183 use TLS to connect to docker
184 --docker-tls-ca="ca.pem"
187 path to trusted CA
188 --docker-tls-cert="cert.pem"
191 path to client certificate
192 --docker-tls-key="key.pem"
195 path to private key
196 --docker_env_metadata_whitelist=""
199 a comma-separated list of environment variable keys that needs to
200 be collected for docker containers
201 --docker_only=false
204 Only report docker containers in addition to root stats
205 --docker_root="/var/lib/docker"
208 DEPRECATED: docker root is read from docker info (this is a fall‐
209 back, default: /var/lib/docker)
210 --enable_load_reader=false
213 Whether to enable cpu load reader
214 --event_storage_age_limit="default=24h"
217 Max length of time for which to store events (per type). Value is a
218 comma separated list of key values, where the keys are event types
219 (e.g.: creation, oom) or "default" and the value is a duration. Default
220 is applied to all non-specified event types
221 --event_storage_event_limit="default=100000"
224 Max number of events to store (per type). Value is a comma sepa‐
225 rated list of key values, where the keys are event types (e.g.: cre‐
226 ation, oom) or "default" and the value is an integer. Default is
227 applied to all non-specified event types
228 --global_housekeeping_interval=0
231 Interval between global housekeepings
232 --housekeeping_interval=0
235 Interval between container housekeepings
236 --httptest.serve=""
239 if non-empty, httptest.NewServer serves on this address and blocks
240 --insecure-skip-tls-verify=false
243 If true, the server's certificate will not be checked for validity.
244 This will make your HTTPS connections insecure
245 --kubeconfig=""
248 Path to the kubeconfig file to use for CLI requests.
249 --log-flush-frequency=0
252 Maximum number of seconds between log flushes
253 --log_backtrace_at=:0
256 when logging hits line file:N, emit a stack trace
257 --log_cadvisor_usage=false
260 Whether to log the usage of the cAdvisor container
261 --log_dir=""
264 If non-empty, write log files in this directory
265 --logtostderr=true
268 log to standard error instead of files
269 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
272 Comma-separated list of files to check for machine-id. Use the
273 first one that exists.
274 --match-server-version=false
277 Require server version to match client version
278 -n, --namespace=""
281 If present, the namespace scope for this CLI request
282 --request-timeout="0"
285 The length of time to wait before giving up on a single server
286 request. Non-zero values should contain a corresponding time unit (e.g.
287 1s, 2m, 3h). A value of zero means don't timeout requests.
288 -s, --server=""
291 The address and port of the Kubernetes API server
292 --stderrthreshold=2
295 logs at or above this threshold go to stderr
296 --storage_driver_buffer_duration=0
299 Writes in the storage driver will be buffered for this duration,
300 and committed to the non memory backends as a single transaction
301 --storage_driver_db="cadvisor"
304 database name
305 --storage_driver_host="localhost:8086"
308 database host:port
309 --storage_driver_password="root"
312 database password
313 --storage_driver_secure=false
316 use secure connection with database
317 --storage_driver_table="stats"
320 table name
321 --storage_driver_user="root"
324 database username
325 --token=""
328 Bearer token for authentication to the API server
329 --user=""
332 The name of the kubeconfig user to use
333 -v, --v=0
336 log level for V logs
337 --version=false
340 Print version information and quit
341 --vmodule=
344 comma-separated list of pattern=N settings for file-filtered log‐
345 ging
346
350 # Clear push secret on a build config
351 oc set build-secret --push --remove bc/mybuild
352 # Set the pull secret on a build config
354 oc set build-secret --pull bc/mybuild mysecret
355 # Set the push and pull secret on a build config
357 oc set build-secret --push --pull bc/mybuild mysecret
358 # Set the source secret on a set of build configs matching a selector
360 oc set build-secret --source -l app=myapp gitsecret
361
366 oc-set(1),
367
371 June 2016, Ported from the Kubernetes man-doc generator
372Openshift Openshift CLI User Manuals OC SET(1)