kibo context

Enroll and maintain this host's Operator identity. This page lists the usage, examples, and flags of kibo context and its subcommands, generated from the kibo source code.

Every command on this page also takes the global flags --endpoint, --json, and --timeout. See CLI reference for kibo.

Subcommands:

• kibo context enroll: Consume a one-time enrollment key and save the formal Operator identity
• kibo context renew: Renew the enrolled Operator identity with a fresh local key
• kibo context show: Show the enrolled Operator identity without contacting ctrl

kibo context enrollCopy Anchor Link

Verifies the ctrl API endpoint named by --endpoint against the server CA carried by the one-time enrollment key, presents the key over mTLS, generates the formal private key locally, and saves the issued identity, the server CA, the endpoint, and the optional forward proxy atomically in the kibo context directory. Every later command connects to that endpoint with that identity. The key is read from a no-echo terminal unless --key-stdin, --key-fd, or --key-file selects another source; it never appears on the command line.

kibo context enroll [flags]

Examples:

kibo context enroll --endpoint https://ctrl.example.com:8443 --key-file ./operator.key

kibo context renewCopy Anchor Link

Renew the enrolled Operator identity with a fresh local key.

kibo context renew [flags]

kibo context showCopy Anchor Link

Show the enrolled Operator identity without contacting ctrl.

kibo context show [flags]