kubectl-certificate-deny(1)

1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubectl certificate deny - Deny a certificate signing request
10
11
12

SYNOPSIS

14       kubectl certificate deny [OPTIONS]
15
16
17

DESCRIPTION

19       Deny a certificate signing request.
20
21
22       kubectl  certificate  deny allows a cluster admin to deny a certificate
23       signing request (CSR). This action tells  a  certificate  signing  con‐
24       troller to not to issue a certificate to the requestor.
25
26
27

OPTIONS

29       --allow-missing-template-keys=true       If  true, ignore any errors in
30       templates when a field or map key is missing in the template. Only  ap‐
31       plies to golang and jsonpath output formats.
32
33
34       -f, --filename=[]      Filename, directory, or URL to files identifying
35       the resource to update
36
37
38       --force=false      Update the CSR even if it is already denied.
39
40
41       -k, --kustomize=""      Process the kustomization directory. This  flag
42       can't be used together with -f or -R.
43
44
45       -o,  --output=""      Output format. One of: (json, yaml, name, go-tem‐
46       plate, go-template-file, template, templatefile, jsonpath, jsonpath-as-
47       json, jsonpath-file).
48
49
50       -R, --recursive=false      Process the directory used in -f, --filename
51       recursively. Useful when you want to manage related manifests organized
52       within the same directory.
53
54
55       --show-managed-fields=false       If  true, keep the managedFields when
56       printing objects in JSON or YAML format.
57
58
59       --template=""      Template string or path to template file to use when
60       -o=go-template, -o=go-template-file. The template format is golang tem‐
61       plates [http://golang.org/pkg/text/template/#pkg-overview].
62
63
64

OPTIONS INHERITED FROM PARENT COMMANDS

66       --as=""      Username to impersonate for the operation. User could be a
67       regular user or a service account in a namespace.
68
69
70       --as-group=[]       Group  to  impersonate for the operation, this flag
71       can be repeated to specify multiple groups.
72
73
74       --as-uid=""      UID to impersonate for the operation.
75
76
77       --azure-container-registry-config=""      Path to the  file  containing
78       Azure container registry configuration information.
79
80
81       --cache-dir="/builddir/.kube/cache"      Default cache directory
82
83
84       --certificate-authority=""      Path to a cert file for the certificate
85       authority
86
87
88       --client-certificate=""      Path to a client certificate file for TLS
89
90
91       --client-key=""      Path to a client key file for TLS
92
93
94       --cluster=""      The name of the kubeconfig cluster to use
95
96
97       --context=""      The name of the kubeconfig context to use
98
99
100       --disable-compression=false      If true, opt-out of response  compres‐
101       sion for all requests to the server
102
103
104       --insecure-skip-tls-verify=false      If true, the server's certificate
105       will not be checked for validity. This will make your HTTPS connections
106       insecure
107
108
109       --kubeconfig=""       Path  to  the  kubeconfig file to use for CLI re‐
110       quests.
111
112
113       --match-server-version=false       Require  server  version  to   match
114       client version
115
116
117       -n,  --namespace=""       If  present, the namespace scope for this CLI
118       request
119
120
121       --password=""      Password for basic authentication to the API server
122
123
124       --profile="none"        Name   of   profile   to   capture.   One    of
125       (none|cpu|heap|goroutine|threadcreate|block|mutex)
126
127
128       --profile-output="profile.pprof"       Name  of  the  file to write the
129       profile to
130
131
132       --request-timeout="0"      The length of time to wait before giving  up
133       on  a  single  server  request. Non-zero values should contain a corre‐
134       sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
135       out requests.
136
137
138       -s, --server=""      The address and port of the Kubernetes API server
139
140
141       --tls-server-name=""       Server  name  to  use for server certificate
142       validation. If it is not provided, the hostname  used  to  contact  the
143       server is used
144
145
146       --token=""      Bearer token for authentication to the API server
147
148
149       --user=""      The name of the kubeconfig user to use
150
151
152       --username=""      Username for basic authentication to the API server
153
154
155       --version=false      Print version information and quit
156
157
158       --warnings-as-errors=false      Treat warnings received from the server
159       as errors and exit with a non-zero exit code
160
161
162

EXAMPLE

164                # Deny CSR 'csr-sqgzp'
165                kubectl certificate deny csr-sqgzp
166
167
168
169

HISTORY

176       January 2015, Originally compiled by Eric Paris (eparis at  redhat  dot
177       com)  based  on the kubernetes source material, but hopefully they have
178       been automatically generated since!
179
180
181
182Manuals                              User            KUBERNETES(1)(kubernetes)