/usr/bin/cilium-certgen

cilium-certgen bootstraps TLS certificates and stores them as K8s secrets

Usage:
  cilium-certgen [flags]

Flags:
      --ca-cert-file string                                            Path to provided Cilium CA certificate file (required if Cilium CA is not generated)
      --ca-common-name string                                          Cilium CA common name (default "Cilium CA")
      --ca-generate                                                    Generate and store Cilium CA certificate
      --ca-key-file string                                             Path to provided Cilium CA key file (required if Cilium CA is not generated)
      --ca-reuse-secret                                                Reuse the Cilium CA secret if it exists, otherwise generate a new one
      --ca-secret-name string                                          Name of the K8s Secret where the Cilium CA cert and key are stored in (default "cilium-ca")
      --ca-secret-namespace string                                     Overwrites the namespace of the K8s Secret where the Cilium CA cert and key are stored in
      --ca-validity-duration duration                                  Cilium CA validity duration (default 26280h0m0s)
      --cilium-namespace string                                        Namespace where the cert secrets and configmaps are stored in (default "kube-system")
      --clustermesh-apiserver-admin-cert-common-name string            clustermesh-apiserver admin certificate common name (default "root")
      --clustermesh-apiserver-admin-cert-generate                      Generate and store clustermesh-apiserver admin certificate
      --clustermesh-apiserver-admin-cert-secret-name string            Name of the K8s Secret where the clustermesh-apiserver admin cert and key are stored in (default "clustermesh-apiserver-admin-cert")
      --clustermesh-apiserver-admin-cert-validity-duration duration    clustermesh-apiserver admin certificate validity duration (default 26280h0m0s)
      --clustermesh-apiserver-client-cert-common-name string           clustermesh-apiserver client certificate common name (default "externalworkload")
      --clustermesh-apiserver-client-cert-generate                     Generate and store clustermesh-apiserver client certificate
      --clustermesh-apiserver-client-cert-secret-name string           Name of the K8s Secret where the clustermesh-apiserver client cert and key are stored in (default "clustermesh-apiserver-client-cert")
      --clustermesh-apiserver-client-cert-validity-duration duration   clustermesh-apiserver client certificate validity duration (default 26280h0m0s)
      --clustermesh-apiserver-remote-cert-common-name string           clustermesh-apiserver remote certificate common name (default "remote")
      --clustermesh-apiserver-remote-cert-generate                     Generate and store clustermesh-apiserver remote certificate
      --clustermesh-apiserver-remote-cert-secret-name string           Name of the K8s Secret where the clustermesh-apiserver remote cert and key are stored in (default "clustermesh-apiserver-remote-cert")
      --clustermesh-apiserver-remote-cert-validity-duration duration   clustermesh-apiserver remote certificate validity duration (default 26280h0m0s)
      --clustermesh-apiserver-server-cert-common-name string           clustermesh-apiserver server certificate common name (default "clustermesh-apiserver.cilium.io")
      --clustermesh-apiserver-server-cert-generate                     Generate and store clustermesh-apiserver server certificate
      --clustermesh-apiserver-server-cert-sans strings                 clustermesh-apiserver server certificate SANs (default [*.mesh.cilium.io])
      --clustermesh-apiserver-server-cert-secret-name string           Name of the K8s Secret where the clustermesh-apiserver server cert and key are stored in (default "clustermesh-apiserver-server-cert")
      --clustermesh-apiserver-server-cert-validity-duration duration   clustermesh-apiserver server certificate validity duration (default 26280h0m0s)
  -D, --debug                                                          Enable debug messages
  -h, --help                                                           help for cilium-certgen
      --hubble-metrics-server-cert-common-name string                  Hubble metrics server certificate common name (default "default.hubble-metrics.cilium.io")
      --hubble-metrics-server-cert-generate                            Generate and store Hubble metrics server certificate
      --hubble-metrics-server-cert-secret-name string                  Name of the K8s Secret where the Hubble metrics server cert and key are stored in (default "hubble-metrics-server-certs")
      --hubble-metrics-server-cert-secret-namespace string             Overwrites the namespace of the K8s Secret where the Hubble metrics server cert and key are stored in
      --hubble-metrics-server-cert-validity-duration duration          Hubble metrics server certificate validity duration (default 26280h0m0s)
      --hubble-relay-client-cert-common-name string                    Hubble Relay client certificate common name (default "*.hubble-relay.cilium.io")
      --hubble-relay-client-cert-generate                              Generate and store Hubble Relay client certificate
      --hubble-relay-client-cert-secret-name string                    Name of the K8s Secret where the Hubble Relay client cert and key are stored in (default "hubble-relay-client-certs")
      --hubble-relay-client-cert-secret-namespace string               Overwrites the namespace of the K8s Secret where the Hubble Relay client cert and key are stored in
      --hubble-relay-client-cert-validity-duration duration            Hubble Relay client certificate validity duration (default 26280h0m0s)
      --hubble-relay-server-cert-common-name string                    Hubble Relay server certificate common name (default "*.hubble-relay.cilium.io")
      --hubble-relay-server-cert-generate                              Generate and store Hubble Relay server certificate
      --hubble-relay-server-cert-secret-name string                    Name of the K8s Secret where the Hubble Relay server cert and key are stored in (default "hubble-relay-server-certs")
      --hubble-relay-server-cert-secret-namespace string               Overwrites the namespace of the K8s Secret where the Hubble Relay server cert and key are stored in
      --hubble-relay-server-cert-validity-duration duration            Hubble Relay server certificate validity duration (default 26280h0m0s)
      --hubble-server-cert-common-name string                          Hubble server certificate common name (default "*.default.hubble-grpc.cilium.io")
      --hubble-server-cert-generate                                    Generate and store Hubble server certificate
      --hubble-server-cert-secret-name string                          Name of the K8s Secret where the Hubble server cert and key are stored in (default "hubble-server-certs")
      --hubble-server-cert-secret-namespace string                     Overwrites the namespace of the K8s Secret where the Hubble server cert and key are stored in
      --hubble-server-cert-validity-duration duration                  Hubble server certificate validity duration (default 26280h0m0s)
      --k8s-kubeconfig-path string                                     Path to the K8s kubeconfig file. If absent, the in-cluster config is used.
      --k8s-request-timeout duration                                   Timeout for K8s API requests (default 1m0s)
  -v, --version                                                        version for cilium-certgen