Kibotos
kibo commands

kibo enrollment

Create one-time enrollment grants and revoke principals. This page lists the usage, examples, and flags of kibo enrollment and its subcommands, generated from the kibo source code.

Every command on this page also takes the global flags --endpoint, --json, and --timeout. See CLI reference for kibo.

Subcommands:

kibo enrollment create

Create a one-time enrollment grant and save its key to --output.

kibo enrollment create [flags]
FlagDefaultDescription
--command-id <key>idempotency key for this change; see kibo help command-ids
--data-plane-extra-host <stringArray>node grants only, repeatable: an extra DNS name or IP address (an IP, loopback, or external DNS name) the node's data-plane certificate must also name, beyond the derived <node_id>.<suffix> host
--node <id>node id
--operator <id>Operator principal id
--output <path>Requiredpath of a new private file for the enrollment key
--ttl <duration>grant lifetime between 1m and 24h (default 1h)

kibo enrollment revoke

Revoke a principal's admission and pending grants.

kibo enrollment revoke [flags]
FlagDefaultDescription
--node <id>node id
--operator <id>Operator principal id
-y, --yesdo not ask for confirmation

On this page