Skip to content

cofidectl attestation-policy add static

Add a new static attestation policy

This command will add a new static attestation policy to Cofide Connect.

cofidectl attestation-policy add static [flags]
--dns-names stringArray DNS names to use for the attestation policy (repeatable)
--federates-with stringArray Name of a trust zone to federate identity with (repeatable)
--federates-with-id stringArray ID of a trust zone to federate identity with (repeatable)
-h, --help help for static
--name string Name to use for the attestation policy
--parent-id-path string Parent ID path to use for the attestation policy
--selectors stringArray Workload selectors to use for the attestation policy (repeatable)
--spiffe-id-path string SPIFFE ID path to use for the attestation policy
--store-svid Store the x509 SVID in the svidstore (requires the svidstore agent plugin)
--trust-zone string Name of the trust zone to scope the attestation policy to
--trust-zone-id string ID of the trust zone to scope the attestation policy to
--config string Cofidectl config file (default: cofide/cofidectl.yaml in the user config directory, e.g. ~/.config on Linux)
--dir string directory to write the generated docs to (default "docs/cli")
--format string output format: md, md-site, man or rest (default "md")
--link-prefix string md-site only, required: URL path the generated pages are published under, used to rewrite links between them
--log-level string Log level (overrides the COFIDECTL_LOG_LEVEL environment variable) (default "ERROR")
-o, --output format Output format (table|json) (default table)
--profile string Config profile to use (overrides the COFIDECTL_PROFILE environment variable)