az k8s-configuration flux

Commands to manage Flux v2 Kubernetes configurations. Azure CLI extensions reference

7 commands 50 options Its page in the Azure CLI extensions reference

Commands

7, each with its page

createCreate a Flux v2 Kubernetes configuration.deleteDelete a Flux v2 Kubernetes configuration.deployed-objectCommands to see deployed objects associated with Flux v2 Kubernetes configurations.kustomizationCommands to manage Kustomizations associated with Flux v2 Kubernetes configurations.listList all Flux v2 Kubernetes configurations.showShow a Flux v2 Kubernetes configuration.updateUpdate a Flux v2 Kubernetes configuration.

Options

50 in the Azure CLI extensions reference

Show its 50 options

--account-keyThe Azure Blob Shared Key for authentication

--branchBranch within the git source to reconcile with the cluster

--bucket-access-keyAccess Key ID used to authenticate with the bucket

--bucket-insecureCommunicate with a bucket without TLS

--bucket-nameName of the S3 bucket to sync

--bucket-secret-keySecret Key used to authenticate with the bucket

--cluster-resource-provider, --cluster-rpCluster Resource Provider name for this clusterType (Required for provisionedClusters)

--commitCommit within the git source to reconcile with the cluster

--container-nameName of the Azure Blob Storage container to sync

--digestDigest of the OCI artifact to reconcile with the cluster

--https-ca-cert-fileFile path to HTTPS CA certificate file for TLS communication with private repository sync

--https-ca-certBase64-encoded HTTPS CA certificate for TLS communication with private repository sync

--https-keyHTTPS token/password for private repository sync

--https-userHTTPS username for private repository sync

--kindSource kind to reconcile

--known-hosts-fileFile path to known_hosts contents containing public SSH keys required to access private Git instances

--known-hostsBase64-encoded known_hosts data containing public SSH keys required to access private Git instances

--kustomization, -kDefine kustomizations to sync sources with parameters ['name', 'path', 'depends_on', 'timeout', 'sync_interval', 'retry_interval', 'prune', 'force', 'disable_health_check']

--local-auth-ref, --local-refLocal reference to a kubernetes secret in the configuration namespace to use for communication to the source

--managed-identity-client-id, --mi-client-idThe client ID of the managed identity for authentication with Azure Blob

--match-oidc-identityList of OIDC identities to match for verification of OCI artifacts.

--name, -nName of the flux configuration

--namespace, --nsNamespace to deploy the configuration

--oci-insecureAllow connecting to an insecure (HTTP) OCI container registry.

--oci-layer-selector-media-type, --oci-media-typeOCI artifact layer media type to select for extraction or copy.

--oci-layer-selector-operation, --oci-operationOperation to perform on the selected OCI artifact layer: 'extract' to extract the layer, 'copy' to copy the tarball as-is (default: extract)

--providerName of the provider used for authentication, azure provider can be used to authenticate to Azure DevOps repositories using Managed Identity

--sas-tokenThe Azure Blob SAS Token for authentication

--scope, -sSpecify scope of the operator to be 'namespace' or 'cluster'

--semverSemver range within the git or OCI source to reconcile with the cluster

--service-account-nameName of the Kubernetes service account to use for accessing the OCI repository

--service-principal-client-certificate, --sp-client-certThe Base64 encoded client certificate for authenticating a service principal with Azure Blob

--service-principal-client-certificate-password, --sp-cert-passwordThe password for the client certificate used to authenticate a service principal with Azure Blob

--service-principal-client-certificate-send-chain, --sp-cert-send-chainSpecify whether to include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication for the client certificate

--service-principal-client-id, --sp-client-idThe client ID for authenticating a service principal with Azure Blob, required for this authentication method

--service-principal-client-secret, --sp-client-secretThe client secret for authenticating a service principal with Azure Blob

--service-principal-tenant-id, --sp-tenant-idThe tenant ID for authenticating a service principal with Azure Blob, required for this authentication method

--ssh-private-key-fileFile path to private ssh key for private repository sync

--ssh-private-keyBase64-encoded private ssh key for private repository sync

--suspendSuspend the reconciliation of the source and kustomizations associated with this configuration

--sync-interval, --intervalTime between reconciliations of the source on the cluster

--tagTag within the git or OCI source to reconcile with the cluster

--timeoutMaximum time to reconcile the source before timing out

--tls-ca-certificateBase64-encoded CA certificate for TLS communication with OCI repository

--tls-client-certificateBase64-encoded client certificate for TLS authentication with OCI repository

--tls-private-keyBase64-encoded private key for TLS authentication with OCI repository

--url, -uURL of the source to reconcile

--use-workload-identityUse workload identity for authentication with OCI repository

--verification-configAn object containing trusted public keys of trusted authors for OCI artifacts.

--verification-providerProvider used for OCI verification.