1OC ADM POLICY(1)                   June 2016                  OC ADM POLICY(1)
2
3
4

NAME

6       oc adm policy remove-scc-from-group - Remove group from scc
7
8
9

SYNOPSIS

11       oc adm policy remove-scc-from-group [OPTIONS]
12
13
14

DESCRIPTION

16       Remove group from scc
17
18
19

OPTIONS

21       --allow-missing-template-keys=true
22           If  true, ignore any errors in templates when a field or map key is
23       missing in the template. Only applies to  golang  and  jsonpath  output
24       formats.
25
26
27       --dry-run=false
28           If  true, only print the object that would be sent, without sending
29       it.
30
31
32       --no-headers=false
33           When using the default or custom-column output format, don't  print
34       headers (default print headers).
35
36
37       -o, --output=""
38           Output  format. One of: json|yaml|wide|name|custom-columns=...|cus‐
39       tom-columns-file=...|go-template=...|go-template-file=...|json‐
40       path=...|jsonpath-file=...   See   custom   columns   [  ⟨http://kuber
41       netes.io/docs/user-guide/kubectl-overview/#custom-columns⟩],     golang
42       template   [  ⟨http://golang.org/pkg/text/template/#pkg-overview⟩]  and
43       jsonpath template [ ⟨http://kubernetes.io/docs/user-guide/jsonpath⟩].
44
45
46       --show-labels=false
47           When printing, show all labels as the  last  column  (default  hide
48       labels column)
49
50
51       --sort-by=""
52           If  non-empty, sort list types using this field specification.  The
53       field  specification  is  expressed  as  a  JSONPath  expression  (e.g.
54       '{.metadata.name}').  The  field  in the API resource specified by this
55       JSONPath expression must be an integer or a string.
56
57
58       --template=""
59           Template string or path to template file  to  use  when  -o=go-tem‐
60       plate,  -o=go-template-file.  The template format is golang templates [
61http://golang.org/pkg/text/template/#pkg-overview⟩].
62
63
64

OPTIONS INHERITED FROM PARENT COMMANDS

66       --allow_verification_with_non_compliant_keys=false
67           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
68       non-compliant with RFC6962.
69
70
71       --alsologtostderr=false
72           log to standard error as well as files
73
74
75       --application_metrics_count_limit=100
76           Max number of application metrics to store (per container)
77
78
79       --as=""
80           Username to impersonate for the operation
81
82
83       --as-group=[]
84           Group  to  impersonate for the operation, this flag can be repeated
85       to specify multiple groups.
86
87
88       --azure-container-registry-config=""
89           Path to the file containing Azure container registry  configuration
90       information.
91
92
93       --boot_id_file="/proc/sys/kernel/random/boot_id"
94           Comma-separated  list  of files to check for boot-id. Use the first
95       one that exists.
96
97
98       --cache-dir="/builddir/.kube/http-cache"
99           Default HTTP cache directory
100
101
102       --certificate-authority=""
103           Path to a cert file for the certificate authority
104
105
106       --client-certificate=""
107           Path to a client certificate file for TLS
108
109
110       --client-key=""
111           Path to a client key file for TLS
112
113
114       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
115           CIDRs opened in GCE firewall for LB traffic proxy  health checks
116
117
118       --cluster=""
119           The name of the kubeconfig cluster to use
120
121
122       --container_hints="/etc/cadvisor/container_hints.json"
123           location of the container hints file
124
125
126       --containerd="unix:///var/run/containerd.sock"
127           containerd endpoint
128
129
130       --context=""
131           The name of the kubeconfig context to use
132
133
134       --default-not-ready-toleration-seconds=300
135           Indicates    the    tolerationSeconds   of   the   toleration   for
136       notReady:NoExecute that is added by default to every pod that does  not
137       already have such a toleration.
138
139
140       --default-unreachable-toleration-seconds=300
141           Indicates  the  tolerationSeconds  of  the  toleration for unreach‐
142       able:NoExecute that is added by default to  every  pod  that  does  not
143       already have such a toleration.
144
145
146       --docker="unix:///var/run/docker.sock"
147           docker endpoint
148
149
150       --docker-tls=false
151           use TLS to connect to docker
152
153
154       --docker-tls-ca="ca.pem"
155           path to trusted CA
156
157
158       --docker-tls-cert="cert.pem"
159           path to client certificate
160
161
162       --docker-tls-key="key.pem"
163           path to private key
164
165
166       --docker_env_metadata_whitelist=""
167           a  comma-separated  list of environment variable keys that needs to
168       be collected for docker containers
169
170
171       --docker_only=false
172           Only report docker containers in addition to root stats
173
174
175       --docker_root="/var/lib/docker"
176           DEPRECATED: docker root is read from docker info (this is  a  fall‐
177       back, default: /var/lib/docker)
178
179
180       --enable_load_reader=false
181           Whether to enable cpu load reader
182
183
184       --event_storage_age_limit="default=24h"
185           Max length of time for which to store events (per type). Value is a
186       comma separated list of key values, where  the  keys  are  event  types
187       (e.g.: creation, oom) or "default" and the value is a duration. Default
188       is applied to all non-specified event types
189
190
191       --event_storage_event_limit="default=100000"
192           Max number of events to store (per type). Value is  a  comma  sepa‐
193       rated  list  of  key values, where the keys are event types (e.g.: cre‐
194       ation, oom) or "default" and  the  value  is  an  integer.  Default  is
195       applied to all non-specified event types
196
197
198       --global_housekeeping_interval=0
199           Interval between global housekeepings
200
201
202       --housekeeping_interval=0
203           Interval between container housekeepings
204
205
206       --insecure-skip-tls-verify=false
207           If true, the server's certificate will not be checked for validity.
208       This will make your HTTPS connections insecure
209
210
211       --kubeconfig=""
212           Path to the kubeconfig file to use for CLI requests.
213
214
215       --log-flush-frequency=0
216           Maximum number of seconds between log flushes
217
218
219       --log_backtrace_at=:0
220           when logging hits line file:N, emit a stack trace
221
222
223       --log_cadvisor_usage=false
224           Whether to log the usage of the cAdvisor container
225
226
227       --log_dir=""
228           If non-empty, write log files in this directory
229
230
231       --logtostderr=true
232           log to standard error instead of files
233
234
235       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
236           Comma-separated list of files to  check  for  machine-id.  Use  the
237       first one that exists.
238
239
240       --match-server-version=false
241           Require server version to match client version
242
243
244       -n, --namespace=""
245           If present, the namespace scope for this CLI request
246
247
248       --request-timeout="0"
249           The  length  of  time  to  wait before giving up on a single server
250       request. Non-zero values should contain a corresponding time unit (e.g.
251       1s, 2m, 3h). A value of zero means don't timeout requests.
252
253
254       -s, --server=""
255           The address and port of the Kubernetes API server
256
257
258       --stderrthreshold=2
259           logs at or above this threshold go to stderr
260
261
262       --storage_driver_buffer_duration=0
263           Writes  in  the  storage driver will be buffered for this duration,
264       and committed to the non memory backends as a single transaction
265
266
267       --storage_driver_db="cadvisor"
268           database name
269
270
271       --storage_driver_host="localhost:8086"
272           database host:port
273
274
275       --storage_driver_password="root"
276           database password
277
278
279       --storage_driver_secure=false
280           use secure connection with database
281
282
283       --storage_driver_table="stats"
284           table name
285
286
287       --storage_driver_user="root"
288           database username
289
290
291       --token=""
292           Bearer token for authentication to the API server
293
294
295       --user=""
296           The name of the kubeconfig user to use
297
298
299       -v, --v=0
300           log level for V logs
301
302
303       --version=false
304           Print version information and quit
305
306
307       --vmodule=
308           comma-separated list of pattern=N settings for  file-filtered  log‐
309       ging
310
311
312

SEE ALSO

314       oc-adm-policy(1),
315
316
317

HISTORY

319       June 2016, Ported from the Kubernetes man-doc generator
320
321
322
323Openshift                  Openshift CLI User Manuals         OC ADM POLICY(1)
Impressum