1OC ADM GROUPS(1) June 2016 OC ADM GROUPS(1)
2
6 oc adm groups prune - Remove old OpenShift groups referencing missing
7 records on an external provider
8
12 oc adm groups prune [OPTIONS]
13
17 Prune OpenShift Groups referencing missing records on from an external
18 provider.
19 In order to prune OpenShift Group records using those from an external
22 provider, determine which Groups you wish to prune. For instance, all
23 or some groups may be selected from the current Groups stored in Open‐
24 Shift that have been synced previously. Any combination of a literal
25 whitelist, a whitelist file and a blacklist file is supported. The path
26 to a sync configuration file that was used for syncing the groups in
27 question is required in order to describe how data is requested from
28 the external record store. Default behavior is to indicate all Open‐
29 Shift groups for which the external record does not exist, to run the
30 pruning process and commit the results, use the --confirm flag.
31
35 --blacklist=""
36 path to the group blacklist file
37 --confirm=false
40 if true, modify OpenShift groups; if false, display groups
41 --sync-config=""
44 path to the sync config
45 --whitelist=""
48 path to the group whitelist file
49
53 --allow_verification_with_non_compliant_keys=false
54 Allow a SignatureVerifier to use keys which are technically
55 non-compliant with RFC6962.
56 --alsologtostderr=false
59 log to standard error as well as files
60 --application_metrics_count_limit=100
63 Max number of application metrics to store (per container)
64 --as=""
67 Username to impersonate for the operation
68 --as-group=[]
71 Group to impersonate for the operation, this flag can be repeated
72 to specify multiple groups.
73 --azure-container-registry-config=""
76 Path to the file containing Azure container registry configuration
77 information.
78 --boot_id_file="/proc/sys/kernel/random/boot_id"
81 Comma-separated list of files to check for boot-id. Use the first
82 one that exists.
83 --cache-dir="/builddir/.kube/http-cache"
86 Default HTTP cache directory
87 --certificate-authority=""
90 Path to a cert file for the certificate authority
91 --client-certificate=""
94 Path to a client certificate file for TLS
95 --client-key=""
98 Path to a client key file for TLS
99 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
102 CIDRs opened in GCE firewall for LB traffic proxy health checks
103 --cluster=""
106 The name of the kubeconfig cluster to use
107 --container_hints="/etc/cadvisor/container_hints.json"
110 location of the container hints file
111 --containerd="unix:///var/run/containerd.sock"
114 containerd endpoint
115 --context=""
118 The name of the kubeconfig context to use
119 --default-not-ready-toleration-seconds=300
122 Indicates the tolerationSeconds of the toleration for
123 notReady:NoExecute that is added by default to every pod that does not
124 already have such a toleration.
125 --default-unreachable-toleration-seconds=300
128 Indicates the tolerationSeconds of the toleration for unreach‐
129 able:NoExecute that is added by default to every pod that does not
130 already have such a toleration.
131 --docker="unix:///var/run/docker.sock"
134 docker endpoint
135 --docker-tls=false
138 use TLS to connect to docker
139 --docker-tls-ca="ca.pem"
142 path to trusted CA
143 --docker-tls-cert="cert.pem"
146 path to client certificate
147 --docker-tls-key="key.pem"
150 path to private key
151 --docker_env_metadata_whitelist=""
154 a comma-separated list of environment variable keys that needs to
155 be collected for docker containers
156 --docker_only=false
159 Only report docker containers in addition to root stats
160 --docker_root="/var/lib/docker"
163 DEPRECATED: docker root is read from docker info (this is a fall‐
164 back, default: /var/lib/docker)
165 --enable_load_reader=false
168 Whether to enable cpu load reader
169 --event_storage_age_limit="default=24h"
172 Max length of time for which to store events (per type). Value is a
173 comma separated list of key values, where the keys are event types
174 (e.g.: creation, oom) or "default" and the value is a duration. Default
175 is applied to all non-specified event types
176 --event_storage_event_limit="default=100000"
179 Max number of events to store (per type). Value is a comma sepa‐
180 rated list of key values, where the keys are event types (e.g.: cre‐
181 ation, oom) or "default" and the value is an integer. Default is
182 applied to all non-specified event types
183 --global_housekeeping_interval=0
186 Interval between global housekeepings
187 --housekeeping_interval=0
190 Interval between container housekeepings
191 --insecure-skip-tls-verify=false
194 If true, the server's certificate will not be checked for validity.
195 This will make your HTTPS connections insecure
196 --kubeconfig=""
199 Path to the kubeconfig file to use for CLI requests.
200 --log-flush-frequency=0
203 Maximum number of seconds between log flushes
204 --log_backtrace_at=:0
207 when logging hits line file:N, emit a stack trace
208 --log_cadvisor_usage=false
211 Whether to log the usage of the cAdvisor container
212 --log_dir=""
215 If non-empty, write log files in this directory
216 --logtostderr=true
219 log to standard error instead of files
220 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
223 Comma-separated list of files to check for machine-id. Use the
224 first one that exists.
225 --match-server-version=false
228 Require server version to match client version
229 -n, --namespace=""
232 If present, the namespace scope for this CLI request
233 --request-timeout="0"
236 The length of time to wait before giving up on a single server
237 request. Non-zero values should contain a corresponding time unit (e.g.
238 1s, 2m, 3h). A value of zero means don't timeout requests.
239 -s, --server=""
242 The address and port of the Kubernetes API server
243 --stderrthreshold=2
246 logs at or above this threshold go to stderr
247 --storage_driver_buffer_duration=0
250 Writes in the storage driver will be buffered for this duration,
251 and committed to the non memory backends as a single transaction
252 --storage_driver_db="cadvisor"
255 database name
256 --storage_driver_host="localhost:8086"
259 database host:port
260 --storage_driver_password="root"
263 database password
264 --storage_driver_secure=false
267 use secure connection with database
268 --storage_driver_table="stats"
271 table name
272 --storage_driver_user="root"
275 database username
276 --token=""
279 Bearer token for authentication to the API server
280 --user=""
283 The name of the kubeconfig user to use
284 -v, --v=0
287 log level for V logs
288 --version=false
291 Print version information and quit
292 --vmodule=
295 comma-separated list of pattern=N settings for file-filtered log‐
296 ging
297
301 # Prune all orphaned groups
302 oc adm groups prune --sync-config=/path/to/ldap-sync-config.yaml --confirm
303 # Prune all orphaned groups except the ones from the blacklist file
305 oc adm groups prune --blacklist=/path/to/blacklist.txt --sync-config=/path/to/ldap-sync-config.yaml --confirm
306 # Prune all orphaned groups from a list of specific groups specified in a whitelist file
308 oc adm groups prune --whitelist=/path/to/whitelist.txt --sync-config=/path/to/ldap-sync-config.yaml --confirm
309 # Prune all orphaned groups from a list of specific groups specified in a whitelist
311 oc adm groups prune groups/group_name groups/other_name --sync-config=/path/to/ldap-sync-config.yaml --confirm
312
317 oc-adm-groups(1),
318
322 June 2016, Ported from the Kubernetes man-doc generator
323Openshift Openshift CLI User Manuals OC ADM GROUPS(1)