Skip to content

zarf tools

Collection of additional tools to make airgap easier

-h, --help help for tools
-a, --architecture string Architecture for OCI images and Zarf packages
--features stringToString [ALPHA] Provide a comma-separated list of feature names to bools to enable or disable. Ex. --features "foo=true,bar=false,baz=true" (default [])
--insecure-skip-tls-verify Skip checking server's certificate for validity. This flag should only be used if you have a specific reason and accept the reduced security posture.
--log-format string Select a logging format. Defaults to 'console'. Valid options are: 'console', 'json', 'dev'. (default "console")
-l, --log-level string Log level when running Zarf. Valid options are: warn, info, debug, trace (default "info")
--no-color Disable terminal color codes in logging and stdout prints.
--plain-http Force the connections over HTTP instead of HTTPS. This flag should only be used if you have a specific reason and accept the reduced security posture.
--tmpdir string Specify the temporary directory to use for intermediate files
--zarf-cache string Specify the location of the Zarf cache directory (default "~/.zarf-cache")
  • zarf - The Airgap Native Packager Manager for Kubernetes
  • zarf tools archiver - Compresses/Decompresses generic archives, including Zarf packages
  • zarf tools clear-cache - Clears the configured git and image cache directory
  • zarf tools download-init - Downloads the init package for the current Zarf version into the specified directory
  • zarf tools gen-key - Generates a cosign public/private keypair that can be used to sign packages
  • zarf tools gen-pki - Generates a Certificate Authority and PKI chain of trust for the given host
  • zarf tools get-creds - Displays a table of credentials for deployed Zarf services. Pass a service key to get a single credential
  • zarf tools helm - Subset of the Helm CLI included with Zarf to help manage helm charts.
  • zarf tools kubectl - kubectl controls the Kubernetes cluster manager
  • zarf tools monitor - Launches a terminal UI to monitor the connected cluster using K9s.
  • zarf tools registry - Tools for working with container registries using go-containertools
  • zarf tools sbom - Generates a Software Bill of Materials (SBOM) for the given package
  • zarf tools update-creds - Updates the credentials for deployed Zarf services. Pass a service key to update credentials for a single service
  • zarf tools wait-for - Waits for a given Kubernetes resource to be ready
  • zarf tools yq - yq is a lightweight and portable command-line data file processor.