Skip to content
Zarf

zarf tools update-creds agent

zarf tools update-creds agent

Updates the TLS certificates for the deployed Zarf agent

Synopsis

Updates the TLS certificates for the deployed Zarf agent. Certificates are autogenerated unless the —agent-tls-ca, —agent-tls-cert, and —agent-tls-key flags are provided.

zarf tools update-creds agent [flags]

Examples

# Autogenerate new agent TLS certificates:
$ zarf tools update-creds agent


# Provide user-managed agent TLS certificates:
$ zarf tools update-creds agent --agent-tls-ca={CA_PATH} --agent-tls-cert={CERT_PATH} --agent-tls-key={KEY_PATH}

Options

      --agent-tls-ca string     Path to a PEM-encoded CA certificate for the Zarf agent
      --agent-tls-cert string   Path to a PEM-encoded TLS certificate for the Zarf agent
      --agent-tls-key string    Path to a PEM-encoded TLS private key for the Zarf agent
  -c, --confirm                 Confirm updating credentials without prompting
      --force-conflicts         Force Helm to take ownership of conflicting fields during Server-Side Apply operations. Use when external tools (kubectl, HPAs, etc.) have modified resources.
  -h, --help                    help for agent

Options inherited from parent commands

  -a, --architecture string        Architecture for OCI images and Zarf packages
      --cache string               Specify the location of the Zarf cache directory (default "~/.zarf-cache")
      --features stringToString    Provide a comma-separated list of feature names to bools to enable or disable. Ex. --features "foo=true,bar=false,baz=true" (default [])
      --insecure-skip-tls-verify   Skip checking server's certificate for validity. This flag should only be used if you have a specific reason and accept the reduced security posture.
      --log-format string          Select a logging format. Defaults to 'console'. Valid options are: 'console', 'json', 'dev'. (default "console")
  -l, --log-level string           Log level when running Zarf. Valid options are: warn, info, debug, trace (default "info")
      --no-color                   Disable terminal color codes in logging and stdout prints.
      --plain-http                 Force the connections over HTTP instead of HTTPS. This flag should only be used if you have a specific reason and accept the reduced security posture.
      --tmpdir string              Specify the temporary directory to use for intermediate files

SEE ALSO

  • zarf tools update-creds - Updates the credentials for deployed Zarf services (deprecated; prefer the per-service subcommands)