clusterctl secrets push

Write the secrets onto a node set

Synopsis

Decrypt each configured secret and write it onto the nodes with the owner and mode the configuration asks for.

Every secret is decrypted before anything is asked or written, so a key this workstation lacks stops the push, and its dry run, before a node is touched. Each file is written beside its target and moved into place only once all of it has arrived, so a lost connection leaves the old file as it was. A node that cannot be reached is not tried again for the next secret; when no node that failed could be reached, the command exits 3.

This overwrites files on the nodes, so it asks first.

clusterctl secrets push -n exe[1-4]

clusterctl secrets push [NODESET] [flags]

Options

  -h, --help   help for push

Options inherited from parent commands

      --config strings      configuration file or directory to read, repeatable (default: CLUSTERCTL_CONFIG or the search path)
      --context string      context to act on (default: the current one)
      --dry-run             report what would be done and change nothing
      --fanout int          how many hosts to work on at once, at least 1 (default: from the configuration)
      --force               allow protected hosts, and nodes the inventory does not know, to be touched
  -n, --nodes stringArray   node set to act on, for example 'exe[1-10],@rack:R02' (default: CLUSTERCTL_NODES)
  -o, --output string       output format: table, wide, json, yaml, nodeset, name, jsonpath=, jq= (default "table")
      --set stringArray     override one configuration value as PATH=VALUE, repeatable
  -y, --yes                 answer the confirmation prompts with yes

clusterctl secrets push