Skip to content

cofidectl attestation-policy add kubernetes

Add a new kubernetes attestation policy

This command will add a new Kubernetes attestation policy to the Cofide configuration state.

cofidectl attestation-policy add kubernetes [flags]
--dns-name-templates stringArray Additional DNS SAN entries for SVIDs issued by this AP. Must conform to the SPIRE controller manager DNS Name Template format
-h, --help help for kubernetes
--name string Name to use for the attestation policy
--namespace string Namespace name selector
--pod-label string Pod label selector in Kubernetes label selector format
--spiffe-id-path-template string Custom SPIFFE ID path template for SVIDs issued by this AP
--config string cofidectl config file (default "cofide.yaml")
--dir string directory to write the generated docs to (default "docs/cli")
--format string output format: md, md-site, man or rest (default "md")
--kube-config string kubeconfig file location (default "$HOME/.kube/config")
--link-prefix string md-site only, required: URL path the generated pages are published under, used to rewrite links between them
--log-level string log level (overrides the COFIDECTL_LOG_LEVEL environment variable) (default "ERROR")