satl ca¶
View and rotate the cluster root CA (docker's swarm ca, as its own verb: certificate operations deserve better than a flag pile)
satl ca is valid on its own — the subcommand is optional ([COMMAND] in the usage line above). Its own options are listed first, its subcommands after.
Options
| Option | Description |
|---|---|
--rotate |
Rotate the cluster root CA (alias of satl ca rotate) |
-d, --detach |
Exit immediately instead of waiting for the rotation to converge |
-q, --quiet |
Only print the root CA certificate |
satl ca rotate¶
Rotate the cluster root CA: mint a new root, cross-sign the transition, re-issue every node's certificate under the new root with no downtime, regenerate the join tokens, drop the old root
Options
| Option | Description |
|---|---|
-d, --detach |
Exit immediately instead of waiting for the rotation to converge |
-q, --quiet |
Only print the new root CA certificate when the rotation completes |
Global options¶
Accepted by every satl command.
| Option | Description |
|---|---|
--host <URL> |
Daemon socket to connect to (docker-style URL) Default: unix:///var/run/satl.sockEnvironment: DOCKER_HOST |
-h, --help |
Print help |
-V, --version |
Print version |
Generated from satl 0.1.0 by make gen. Change it in the SatL source or in overlay/cli.yml, never here.