kubectl-certificate-deny(1)

1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubectl certificate deny - Deny a certificate signing request
10
11
12

SYNOPSIS

14       kubectl certificate deny [OPTIONS]
15
16
17

DESCRIPTION

19       Deny a certificate signing request.
20
21
22       kubectl  certificate  deny allows a cluster admin to deny a certificate
23       signing request (CSR). This action tells  a  certificate  signing  con‐
24       troller to not to issue a certificate to the requestor.
25
26
27

OPTIONS

29       --allow-missing-template-keys=true       If  true, ignore any errors in
30       templates when a field or map key is missing in the template. Only  ap‐
31       plies to golang and jsonpath output formats.
32
33
34       -f, --filename=[]      Filename, directory, or URL to files identifying
35       the resource to update
36
37
38       --force=false      Update the CSR even if it is already denied.
39
40
41       -k, --kustomize=""      Process the kustomization directory. This  flag
42       can't be used together with -f or -R.
43
44
45       -o,  --output=""      Output format. One of: (json, yaml, name, go-tem‐
46       plate, go-template-file, template, templatefile, jsonpath, jsonpath-as-
47       json, jsonpath-file).
48
49
50       -R, --recursive=false      Process the directory used in -f, --filename
51       recursively. Useful when you want to manage related manifests organized
52       within the same directory.
53
54
55       --show-managed-fields=false       If  true, keep the managedFields when
56       printing objects in JSON or YAML format.
57
58
59       --template=""      Template string or path to template file to use when
60       -o=go-template, -o=go-template-file. The template format is golang tem‐
61       plates [http://golang.org/pkg/text/template/#pkg-overview].
62
63
64

OPTIONS INHERITED FROM PARENT COMMANDS

66       --as=""      Username to impersonate for the operation. User could be a
67       regular user or a service account in a namespace.
68
69
70       --as-group=[]       Group  to  impersonate for the operation, this flag
71       can be repeated to specify multiple groups.
72
73
74       --as-uid=""      UID to impersonate for the operation.
75
76
77       --azure-container-registry-config=""      Path to the  file  containing
78       Azure container registry configuration information.
79
80
81       --cache-dir="/builddir/.kube/cache"      Default cache directory
82
83
84       --certificate-authority=""      Path to a cert file for the certificate
85       authority
86
87
88       --client-certificate=""      Path to a client certificate file for TLS
89
90
91       --client-key=""      Path to a client key file for TLS
92
93
94       --cluster=""      The name of the kubeconfig cluster to use
95
96
97       --context=""      The name of the kubeconfig context to use
98
99
100       --insecure-skip-tls-verify=false      If true, the server's certificate
101       will not be checked for validity. This will make your HTTPS connections
102       insecure
103
104
105       --kubeconfig=""      Path to the kubeconfig file to  use  for  CLI  re‐
106       quests.
107
108
109       --match-server-version=false        Require  server  version  to  match
110       client version
111
112
113       -n, --namespace=""      If present, the namespace scope  for  this  CLI
114       request
115
116
117       --password=""      Password for basic authentication to the API server
118
119
120       --profile="none"         Name   of   profile   to   capture.   One   of
121       (none|cpu|heap|goroutine|threadcreate|block|mutex)
122
123
124       --profile-output="profile.pprof"      Name of the  file  to  write  the
125       profile to
126
127
128       --request-timeout="0"       The length of time to wait before giving up
129       on a single server request. Non-zero values  should  contain  a  corre‐
130       sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
131       out requests.
132
133
134       -s, --server=""      The address and port of the Kubernetes API server
135
136
137       --tls-server-name=""      Server name to  use  for  server  certificate
138       validation.  If  it  is  not provided, the hostname used to contact the
139       server is used
140
141
142       --token=""      Bearer token for authentication to the API server
143
144
145       --user=""      The name of the kubeconfig user to use
146
147
148       --username=""      Username for basic authentication to the API server
149
150
151       --version=false      Print version information and quit
152
153
154       --warnings-as-errors=false      Treat warnings received from the server
155       as errors and exit with a non-zero exit code
156
157
158

EXAMPLE

160                # Deny CSR 'csr-sqgzp'
161                kubectl certificate deny csr-sqgzp
162
163
164
165

HISTORY

172       January  2015,  Originally compiled by Eric Paris (eparis at redhat dot
173       com) based on the kubernetes source material, but hopefully  they  have
174       been automatically generated since!
175
176
177
178Manuals                              User            KUBERNETES(1)(kubernetes)