cofidectl exchange-policy update

Update an exchange policy

cofidectl exchange-policy update <ID> [flags]

Options

      --action string                  New action: allow or deny
      --actor-identity stringArray     Actor identity matcher (repeatable, prefix with glob: for glob match)
      --actor-issuer stringArray       Actor issuer matcher (repeatable, prefix with glob: for glob match)
      --client-id stringArray          Client ID matcher (repeatable, prefix with glob: for glob match)
  -h, --help                           help for update
      --hook stringArray               External hook (repeatable). Two formats are accepted:
                                         Inline JSON: {"name":"<n>","url":"<u>","auth":{"spiffe_mtls":{"spiffe_id":"<id>"}},"description":"<d>","timeout":"<d>"} (description and timeout are optional)
                                         File:        file://<path> (JSON file with the same format as inline) (replaces all existing hooks)
      --name string                    New name
      --outbound-identity string       Outbound identity to set on the exchanged token
      --outbound-oauth-as string       Outbound OAuth AS configuration. Two formats are accepted:
                                         Inline JSON: {"grant_type":"<g>","issuer_url":"<u>","token_url":"<u>","audiences":["<a>"],"timeout":"<d>"} (token_url, audiences and timeout are optional)
                                         File:        file://<path> (JSON file with the same format as inline)
      --outbound-scope stringArray     Outbound scope to grant (repeatable)
      --outbound-spiffe                Mark policy as an OIDC to SPIFFE JWT-SVID exchange instead of an OAuth access token exchange
      --subject-audience stringArray   Subject audience matcher (repeatable, prefix with glob: for glob match)
      --subject-identity stringArray   Subject identity matcher (repeatable, prefix with glob: for glob match)
      --subject-issuer stringArray     Subject issuer matcher (repeatable, prefix with glob: for glob match)
      --target-audience stringArray    Target audience matcher (repeatable, prefix with glob: for glob match)

Options inherited from parent commands

      --config string        cofidectl config file (default "cofide.yaml")
      --dir string           directory to write the generated docs to (default "docs/cli")
      --format string        output format: md, md-site, man or rest (default "md")
      --kube-config string   kubeconfig file location (default "$HOME/.kube/config")
      --link-prefix string   md-site only, required: URL path the generated pages are published under, used to rewrite links between them
      --log-level string     log level (overrides the COFIDECTL_LOG_LEVEL environment variable) (default "ERROR")

SEE ALSO

• cofidectl exchange-policy - Manage Connect Exchange Policies