/usr/bin/agentk

GitLab Agent for Kubernetes

Usage:
  agentk [flags]

Flags:
      --api-cert-file string                  File with X.509 certificate in PEM format for API endpoint TLS
      --api-client-ca-cert-file string        File with X.509 certificate authority certificate in PEM format. Used for verifying client cert of KAS (GitLab Kubernetes Agent Server). This is used for kas->agentk mTLS
      --api-jwt-file string                   Base64-encoded EdDSA public key to validate JWT tokens from kas. Used for API endpoint
      --api-key-file string                   File with X.509 key in PEM format for API endpoint TLS
      --api-listen-address string             API address to listen on
      --api-listen-network string             API network to listen on (default "tcp")
      --api-mtls                              Used to enabled kas->agentk mTLS. Defaults to true when --api-client-ca-cert-file is specified
      --as string                             Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
      --as-group stringArray                  Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --as-uid string                         UID to impersonate for the operation.
      --cache-dir string                      Default cache directory (default "/tmp/.kube/cache")
      --certificate-authority string          Path to a cert file for the certificate authority
      --client-certificate string             Path to a client certificate file for TLS
      --client-key string                     Path to a client key file for TLS
      --cluster string                        The name of the kubeconfig cluster to use
      --context string                        The name of the kubeconfig context to use
      --disable-compression                   If true, opt-out of response compression for all requests to the server
  -h, --help                                  help for agentk
      --insecure-skip-tls-verify              If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kas-address string                    GitLab Kubernetes Agent Server address
      --kas-ca-cert-file string               File with X.509 certificate authority certificate in PEM format. Used for verifying cert of KAS (GitLab Kubernetes Agent Server)
      --kas-header stringArray                HTTP headers to set when connecting to the agent server
      --kas-insecure-skip-tls-verify          If true, the agent server's certificate will not be checked for validity. This will make the connection insecure
      --kas-tls-server-name string            Server name to use for agent server certificate validation. If it is not provided, the hostname used to contact the server is used
      --kubeconfig string                     Path to the kubeconfig file to use for CLI requests.
  -n, --namespace string                      If present, the namespace scope for this CLI request
      --observability-cert-file string        File with X.509 certificate in PEM format for observability endpoint TLS
      --observability-key-file string         File with X.509 key in PEM format for observability endpoint TLS
      --observability-listen-address string   Observability address to listen on (default ":8080")
      --observability-listen-network string   Observability network to listen on (default "tcp")
      --private-api-ca-cert-file string       File with X.509 certificate authority certificate in PEM format for private API endpoint TLS
      --private-api-cert-file string          File with X.509 certificate in PEM format for private API endpoint TLS
      --private-api-jwt-file string           Base64-encoded secret for JWT token creation and validation for agentk to agentk private API access
      --private-api-key-file string           File with X.509 key in PEM format for private API endpoint TLS
      --private-api-listen-address string     Private API address to listen on (default ":8081")
      --private-api-listen-network string     Private API network to listen on (default "tcp")
      --request-timeout string                The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                         The address and port of the Kubernetes API server
      --tls-server-name string                Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used
      --token string                          Bearer token for authentication to the API server
      --token-file string                     File with access token
      --user string                           The name of the kubeconfig user to use
  -v, --version                               version for agentk