cloudtaser-cli target migrate-introduction¶
Enroll and switch an existing CSI/authKey installation with verified live-template rollback (experimental)
Usage¶
Flags¶
| Flag | Type | Default | Required | Description |
|---|---|---|---|---|
--enrollment-id |
string | (empty) |
yes | opaque administrator enrollment ID |
--fingerprint |
string | (empty) |
yes | approved kube-system UID |
--help, -h |
bool | false |
no | help for migrate-introduction |
--instance |
string | (empty) |
yes | approved source authority instance |
--introduction-egress-cidr |
string | (empty) |
yes | scoped Port endpoint CIDR |
--introduction-port |
int | 8444 |
no | Port introduction TCP port |
--introduction-url |
string | (empty) |
yes | Port HTTPS /v1/operator-introduction URL |
--kubeconfig |
string | (empty) |
no | verified kubeconfig for the initial co-located Port profile |
--maintenance-window |
bool | false |
no | acknowledge two admission interruptions for Recreate deployments |
--namespace |
string | cloudtaser-system |
no | operator namespace |
--operator-image |
string | (empty) |
yes | explicit matched slice-2 operator image |
--port-ca-configmap |
string | (empty) |
yes | public Port CA ConfigMap (ca.crt) |
--port-namespace |
string | (empty) |
yes | Port namespace containing its public CA |
--secretstore-address |
string | (empty) |
no | administrator OpenBao HTTPS address |
--secretstore-ca-file |
string | (empty) |
no | OpenBao public CA file |
--secretstore-token-file |
string | (empty) |
no | administrator token file (or env) |
--timeout |
duration | 10m0s |
no | independent readiness and rollback budget per phase |