diff --git a/docs/docs/reference/cli.md b/docs/docs/reference/cli.md index e63c1575..da2580a0 100644 --- a/docs/docs/reference/cli.md +++ b/docs/docs/reference/cli.md @@ -82,8 +82,10 @@ marblerun install --dcap-pccs-url https://pccs.example.com/sgx/certification/v4/ ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun uninstall @@ -109,8 +111,10 @@ marblerun uninstall [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun precheck @@ -135,8 +139,10 @@ marblerun precheck [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun check @@ -154,17 +160,18 @@ marblerun check [flags] ### Options ``` - -h, --help help for check - --namespace string Namespace MarbleRun is deployed to (default "marblerun") - --timeout uint Time to wait before aborting in seconds (default 60) + -h, --help help for check + --timeout uint Time to wait before aborting in seconds (default 60) ``` ### Options inherited from parent commands ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest @@ -194,8 +201,10 @@ manifest set manifest.json example.com:4433 [--era-config=config.json] [--insecu ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest get @@ -222,6 +231,7 @@ marblerun manifest get $MARBLERUN -s --era-config=era.json ``` -u, --display-update Set to merge updates into the displayed manifest -h, --help help for get + --keep-cert Set to keep the certificate of the Coordinator and save it to the location specified by --coordinator-cert -o, --output string Save output to file instead of printing to stdout -s, --signature Set to additionally display the manifests signature ``` @@ -230,8 +240,10 @@ marblerun manifest get $MARBLERUN -s --era-config=era.json ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest log @@ -265,8 +277,10 @@ marblerun manifest log $MARBLERUN ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest set @@ -298,8 +312,10 @@ marblerun manifest set manifest.json $MARBLERUN --recovery-data=recovery-secret. ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest signature @@ -324,8 +340,10 @@ marblerun manifest signature [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest update @@ -346,8 +364,10 @@ Manage manifest updates for the MarbleRun Coordinator. ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest update apply @@ -383,8 +403,10 @@ marblerun manifest update apply update-manifest.json $MARBLERUN --cert=admin-cer ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest update acknowledge @@ -421,8 +443,10 @@ marblerun manifest update acknowledge update-manifest.json $MARBLERUN --cert=adm ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest update cancel @@ -455,8 +479,10 @@ marblerun manifest update cancel $MARBLERUN --cert=admin-cert.pem --key=admin-ke ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest update get @@ -489,8 +515,10 @@ marblerun manifest update get $MARBLERUN --era-config=era.json ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun manifest verify @@ -521,8 +549,10 @@ marblerun manifest verify manifest.json $MARBLERUN ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun certificate @@ -543,8 +573,10 @@ Retrieves the certificate of the MarbleRun Coordinator ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun certificate root @@ -570,8 +602,10 @@ marblerun certificate root [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun certificate intermediate @@ -597,8 +631,10 @@ marblerun certificate intermediate [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun certificate chain @@ -624,8 +660,10 @@ marblerun certificate chain [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun secret @@ -650,8 +688,10 @@ Set or retrieve a secret defined in the manifest. ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun secret set @@ -695,9 +735,11 @@ marblerun secret set certificate.pem $MARBLERUN -c admin.crt -k admin.key --from ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) -c, --cert string PEM encoded MarbleRun user certificate file (required) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode -k, --key string PEM encoded MarbleRun user key file (required) + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun secret get @@ -734,9 +776,11 @@ marblerun secret get genericSecret symmetricKeyShared $MARBLERUN -c admin.crt -k ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) -c, --cert string PEM encoded MarbleRun user certificate file (required) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode -k, --key string PEM encoded MarbleRun user key file (required) + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun status @@ -777,8 +821,10 @@ marblerun status [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun recover @@ -809,8 +855,10 @@ marblerun recover recovery_key_decrypted $MARBLERUN ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun package-info @@ -835,8 +883,10 @@ marblerun package-info [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ``` ## marblerun version @@ -861,7 +911,9 @@ marblerun version [flags] ``` --accepted-tcb-statuses strings Comma-separated list of user accepted TCB statuses (e.g. ConfigurationNeeded,ConfigurationAndSWHardeningNeeded) (default [UpToDate]) + --coordinator-cert string Path to MarbleRun Coordinator's root certificate to use for TLS connections (default "/github/home/.config/marblerun/coordinator-cert.pem") --era-config string Path to remote attestation config file in json format, if none provided the newest configuration will be loaded from github -i, --insecure Set to skip quote verification, needed when running in simulation mode + -n, --namespace string Kubernetes namespace of the MarbleRun installation (default "marblerun") ```