1OC SET(1) June 2016 OC SET(1)
2
3
4
6 oc set build-secret - Update a build secret on a build config
7
8
9
11 oc set build-secret [OPTIONS]
12
13
14
16 Set or remove a build secret on a build config
17
18
19 A build config can reference a secret to push or pull images from pri‐
20 vate registries or to access private source repositories.
21
22
23 Specify the type of secret being set by using the --push, --pull, or
24 --source flags. A secret reference can be removed by using --remove
25 flag.
26
27
28 A label selector may be specified with the --selector flag to select
29 the build configs on which to set or remove secrets. Alternatively, all
30 build configs in the namespace can be selected with the --all flag.
31
32
33
35 --all=false
36 If true, select all build configs in the namespace
37
38
39 --allow-missing-template-keys=true
40 If true, ignore any errors in templates when a field or map key is
41 missing in the template. Only applies to golang and jsonpath output
42 formats.
43
44
45 --dry-run=false
46 If true, only print the object that would be sent, without sending
47 it.
48
49
50 -f, --filename=[]
51 Filename, directory, or URL to files to use to edit the resource
52
53
54 --local=false
55 If true, set build-secret will NOT contact api-server but run lo‐
56 cally.
57
58
59 -o, --output=""
60 Output format. One of: json|yaml|name|go-template-file|template‐
61 file|template|go-template|jsonpath|jsonpath-file.
62
63
64 --pull=false
65 If true, set the pull secret on a build config
66
67
68 --push=false
69 If true, set the push secret on a build config
70
71
72 -R, --recursive=false
73 Process the directory used in -f, --filename recursively. Useful
74 when you want to manage related manifests organized within the same di‐
75 rectory.
76
77
78 --remove=false
79 If true, remove the build secret.
80
81
82 -l, --selector=""
83 Selector (label query) to filter build configs
84
85
86 --source=false
87 If true, set the source secret on a build config
88
89
90 --template=""
91 Template string or path to template file to use when -o=go-tem‐
92 plate, -o=go-template-file. The template format is golang templates [
93 ⟨http://golang.org/pkg/text/template/#pkg-overview⟩].
94
95
96
98 --allow_verification_with_non_compliant_keys=false
99 Allow a SignatureVerifier to use keys which are technically
100 non-compliant with RFC6962.
101
102
103 --alsologtostderr=false
104 log to standard error as well as files
105
106
107 --application_metrics_count_limit=100
108 Max number of application metrics to store (per container)
109
110
111 --as=""
112 Username to impersonate for the operation
113
114
115 --as-group=[]
116 Group to impersonate for the operation, this flag can be repeated
117 to specify multiple groups.
118
119
120 --azure-container-registry-config=""
121 Path to the file containing Azure container registry configuration
122 information.
123
124
125 --boot_id_file="/proc/sys/kernel/random/boot_id"
126 Comma-separated list of files to check for boot-id. Use the first
127 one that exists.
128
129
130 --cache-dir="/builddir/.kube/http-cache"
131 Default HTTP cache directory
132
133
134 --certificate-authority=""
135 Path to a cert file for the certificate authority
136
137
138 --client-certificate=""
139 Path to a client certificate file for TLS
140
141
142 --client-key=""
143 Path to a client key file for TLS
144
145
146 --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
147 CIDRs opened in GCE firewall for LB traffic proxy health checks
148
149
150 --cluster=""
151 The name of the kubeconfig cluster to use
152
153
154 --container_hints="/etc/cadvisor/container_hints.json"
155 location of the container hints file
156
157
158 --containerd="unix:///var/run/containerd.sock"
159 containerd endpoint
160
161
162 --context=""
163 The name of the kubeconfig context to use
164
165
166 --default-not-ready-toleration-seconds=300
167 Indicates the tolerationSeconds of the toleration for
168 notReady:NoExecute that is added by default to every pod that does not
169 already have such a toleration.
170
171
172 --default-unreachable-toleration-seconds=300
173 Indicates the tolerationSeconds of the toleration for unreach‐
174 able:NoExecute that is added by default to every pod that does not al‐
175 ready have such a toleration.
176
177
178 --docker="unix:///var/run/docker.sock"
179 docker endpoint
180
181
182 --docker-tls=false
183 use TLS to connect to docker
184
185
186 --docker-tls-ca="ca.pem"
187 path to trusted CA
188
189
190 --docker-tls-cert="cert.pem"
191 path to client certificate
192
193
194 --docker-tls-key="key.pem"
195 path to private key
196
197
198 --docker_env_metadata_whitelist=""
199 a comma-separated list of environment variable keys that needs to
200 be collected for docker containers
201
202
203 --docker_only=false
204 Only report docker containers in addition to root stats
205
206
207 --docker_root="/var/lib/docker"
208 DEPRECATED: docker root is read from docker info (this is a fall‐
209 back, default: /var/lib/docker)
210
211
212 --enable_load_reader=false
213 Whether to enable cpu load reader
214
215
216 --event_storage_age_limit="default=24h"
217 Max length of time for which to store events (per type). Value is a
218 comma separated list of key values, where the keys are event types
219 (e.g.: creation, oom) or "default" and the value is a duration. Default
220 is applied to all non-specified event types
221
222
223 --event_storage_event_limit="default=100000"
224 Max number of events to store (per type). Value is a comma sepa‐
225 rated list of key values, where the keys are event types (e.g.: cre‐
226 ation, oom) or "default" and the value is an integer. Default is ap‐
227 plied to all non-specified event types
228
229
230 --global_housekeeping_interval=0
231 Interval between global housekeepings
232
233
234 --housekeeping_interval=0
235 Interval between container housekeepings
236
237
238 --insecure-skip-tls-verify=false
239 If true, the server's certificate will not be checked for validity.
240 This will make your HTTPS connections insecure
241
242
243 --kubeconfig=""
244 Path to the kubeconfig file to use for CLI requests.
245
246
247 --log-flush-frequency=0
248 Maximum number of seconds between log flushes
249
250
251 --log_backtrace_at=:0
252 when logging hits line file:N, emit a stack trace
253
254
255 --log_cadvisor_usage=false
256 Whether to log the usage of the cAdvisor container
257
258
259 --log_dir=""
260 If non-empty, write log files in this directory
261
262
263 --logtostderr=true
264 log to standard error instead of files
265
266
267 --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
268 Comma-separated list of files to check for machine-id. Use the
269 first one that exists.
270
271
272 --match-server-version=false
273 Require server version to match client version
274
275
276 -n, --namespace=""
277 If present, the namespace scope for this CLI request
278
279
280 --request-timeout="0"
281 The length of time to wait before giving up on a single server re‐
282 quest. Non-zero values should contain a corresponding time unit (e.g.
283 1s, 2m, 3h). A value of zero means don't timeout requests.
284
285
286 -s, --server=""
287 The address and port of the Kubernetes API server
288
289
290 --stderrthreshold=2
291 logs at or above this threshold go to stderr
292
293
294 --storage_driver_buffer_duration=0
295 Writes in the storage driver will be buffered for this duration,
296 and committed to the non memory backends as a single transaction
297
298
299 --storage_driver_db="cadvisor"
300 database name
301
302
303 --storage_driver_host="localhost:8086"
304 database host:port
305
306
307 --storage_driver_password="root"
308 database password
309
310
311 --storage_driver_secure=false
312 use secure connection with database
313
314
315 --storage_driver_table="stats"
316 table name
317
318
319 --storage_driver_user="root"
320 database username
321
322
323 --token=""
324 Bearer token for authentication to the API server
325
326
327 --user=""
328 The name of the kubeconfig user to use
329
330
331 -v, --v=0
332 log level for V logs
333
334
335 --version=false
336 Print version information and quit
337
338
339 --vmodule=
340 comma-separated list of pattern=N settings for file-filtered log‐
341 ging
342
343
344
346 # Clear push secret on a build config
347 oc set build-secret --push --remove bc/mybuild
348
349 # Set the pull secret on a build config
350 oc set build-secret --pull bc/mybuild mysecret
351
352 # Set the push and pull secret on a build config
353 oc set build-secret --push --pull bc/mybuild mysecret
354
355 # Set the source secret on a set of build configs matching a selector
356 oc set build-secret --source -l app=myapp gitsecret
357
358
359
360
362 oc-set(1),
363
364
365
367 June 2016, Ported from the Kubernetes man-doc generator
368
369
370
371Openshift Openshift CLI User Manuals OC SET(1)