cloudtaser-cli source authority prepare¶
Prepare one public workload approval for review, then use authority render, provision and activate. This command reads no credentials and makes no source or Kubernetes calls. It grants only read on each explicitly named KV data path; no wildcard, transit, issuer, proxy or generic token grant is inferred. Advanced multi-workload approvals use the same documented JSON schema and strict parser.
Usage¶
Flags¶
| Flag | Type | Default | Required | Description |
|---|---|---|---|---|
--application-record |
stringSlice | [] |
no | exact application record name, bound to the enclosing cluster and namespace |
--fingerprint |
string | (empty) |
yes | actual kube-system namespace UID of the target cluster |
--generation |
string | (empty) |
yes | new immutable authority generation label |
--help, -h |
bool | false |
no | help for prepare |
--instance |
string | (empty) |
yes | administrator-selected source instance label |
--namespace |
string | (empty) |
yes | exact protected workload namespace |
--secret-path |
stringSlice | [] |
no | exact KV v2 data path; repeat for each approved read |
--service-account |
string | (empty) |
yes | exact protected workload ServiceAccount |