Skip to content

cofidectl cluster add

Add a cluster

This command will add a cluster to Cofide Connect.

cofidectl cluster add [flags]
--external-server If the SPIRE server runs externally
-h, --help help for add
--kubernetes-ca-cert string Path to the CA certificate of the Kubernetes cluster, used for TLS during OIDC validation
--kubernetes-context string Kubernetes context to use for this cluster
--kubernetes-oidc-issuer string OIDC issuer URL for the Kubernetes cluster
--name string Name to use for the cluster
--profile string Cofide profile used in the installation (e.g. kubernetes, istio) (default "kubernetes")
--psat-config string PSAT trust provider configuration. Two formats are accepted:
Inline JSON: {"field":value,...}
File: file://<path> (JSON file with the same format)
JSON fields (all optional):
enabled (bool), api_server_url, api_server_ca_cert (file path),
api_server_tls_server_name, api_server_proxy_url,
spire_server_audience,
allowed_service_accounts (["ns/name",...]),
allowed_node_label_keys (["key",...]),
allowed_pod_label_keys (["key",...])
--trust-zone string Name of the trust zone to add the cluster to
--trust-zone-id string ID of the trust zone to add the cluster to
--config string Cofidectl config file (default: cofide/cofidectl.yaml in the user config directory, e.g. ~/.config on Linux)
--dir string directory to write the generated docs to (default "docs/cli")
--format string output format: md, md-site, man or rest (default "md")
--link-prefix string md-site only, required: URL path the generated pages are published under, used to rewrite links between them
--log-level string Log level (overrides the COFIDECTL_LOG_LEVEL environment variable) (default "ERROR")
-o, --output format Output format (table|json) (default table)