Skip to content

cofidectl cluster add

Add a cluster

This command will add a cluster to the Cofide configuration state.

cofidectl cluster add <NAME> [flags]
--external-server If the SPIRE server runs externally
-h, --help help for add
--kubernetes-ca-cert string Path to the CA certificate of the Kubernetes cluster, used for TLS during OIDC validation
--kubernetes-context string Kubernetes context to use for this cluster
--kubernetes-oidc-issuer string OIDC issuer URL for the Kubernetes cluster
--profile string Cofide profile used in the installation (e.g. kubernetes, istio) (default "kubernetes")
--psat-config string PSAT trust provider configuration. Two formats are accepted:
Inline JSON: {"field":value,...}
File: file://<path> (JSON file with the same format)
JSON fields (all optional):
enabled (bool), api_server_url, api_server_ca_cert (file path),
api_server_tls_server_name, api_server_proxy_url,
spire_server_audience,
allowed_service_accounts (["ns/name",...]),
allowed_node_label_keys (["key",...]),
allowed_pod_label_keys (["key",...])
--trust-zone string Name of the trust zone to add the cluster to
--config string cofidectl config file (default "cofide.yaml")
--dir string directory to write the generated docs to (default "docs/cli")
--format string output format: md, md-site, man or rest (default "md")
--kube-config string kubeconfig file location (default "$HOME/.kube/config")
--link-prefix string md-site only, required: URL path the generated pages are published under, used to rewrite links between them
--log-level string log level (overrides the COFIDECTL_LOG_LEVEL environment variable) (default "ERROR")