Options
| Flag | Type | Description |
|---|---|---|
-h, --help | — | Help for auth. |
Options inherited from parent commands
| Flag | Type | Description |
|---|---|---|
--as | string | Username to impersonate for the operation. User could be a regular user or a service account in a namespace. |
--as-group | stringArray | Group to impersonate for the operation. Can be repeated to specify multiple groups. |
--as-uid | string | UID to impersonate for the operation. |
--as-user-extra | stringArray | User extras to impersonate for the operation. Can be repeated to specify multiple values for the same key. |
--certificate-authority | string | Path to a cert file for the certificate authority. |
--disable-compression | — | If true, opt-out of response compression for all requests to the server. |
--insecure-skip-tls-verify | — | If true, the server’s certificate will not be checked for validity. This will make your HTTPS connections insecure. |
--log-flush-frequency | duration | Maximum number of seconds between log flushes. (default 5s) |
-n, --namespace | string | If present, the namespace scope for this CLI request. |
--organization | string | Organization name. |
--platform-wide | — | Access the platform root instead of a project or organization control plane. |
--project | string | Project name. |
--request-timeout | string | The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don’t timeout requests. (default "0") |
-s, --server | string | The address and port of the Kubernetes API server. |
--tls-server-name | string | Server name to use for server certificate validation. If not provided, the hostname used to contact the server is used. |
--token | string | Bearer token for authentication to the API server. |
--user | string | The name of the kubeconfig user to use. |
-v, --v | Level | Number for the log level verbosity. |
--vmodule | moduleSpec | Comma-separated list of pattern=N settings for file-filtered logging (only works for the default text log format). |
See also
- datumctl - A CLI for interacting with the Datum platform
- datumctl auth can-i - Check whether an action is allowed
- datumctl auth get-token - Retrieve access token for active user (raw or K8s format)
- datumctl auth list - List locally authenticated users
- datumctl auth login - Authenticate with Datum Cloud via OAuth2 PKCE flow
- datumctl auth logout - Remove local authentication credentials for a specified user or all users
- datumctl auth switch - Set the active authenticated user session
- datumctl auth update-kubeconfig - Update the kubeconfig file
- datumctl auth whoami - Experimental: Check self subject attributes