MAQPNADocs

maqpna cluster-info dump

Collect a support bundle (= maqpna support-bundle)

Observe-o json | yaml

Synopsis#

maqpna cluster-info dump [support-bundle flags]

Description#

From the help of maqpna cluster-info:

Prints the Kubernetes API server of the context, then each MAQPNA component (gateway, identity broker, attestation service, operator) with its URL, version and whether it answers. maqpna status shows the installed release and its workloads; maqpna doctor checks everything in depth; maqpna version --check enforces the version skew policy. cluster-info dump is maqpna support-bundle.

Flags#

FlagTypeDescriptionDefault
--agent-namespacesswitchalso collect pod lists and events of agent namespaces (no agent logs)none
--allow-gateway-mismatchswitchsend the context's login token to a gateway other than the one it was issued for (env MAQPNA_ALLOW_GATEWAY_MISMATCH=1)none
--debugswitchprint Helm's debug log to stderrnone
--gatewaystringgateway base URL: adds the gateway posture to doctor.jsonnone
--kube-contextstringkubeconfig context (default: the maqpna context's)none
-n, --namespacestringnamespace of the MAQPNA control plane (the Helm release)maqpna-system
--oidc-token-filestringOIDC access token file (auditor/admin)none
--outstringarchive to write (default maqpna-support-YYYYMMDD-HHMMSS.tar.gz; - for stdout)none
--releasestringHelm release namemaqpna
--sincedurationonly logs newer than this (e.g. 24h; 0: no limit)none
--tailintlog lines per container2000
--timeoutdurationtimeout of Kubernetes operations (CRDs Established, --wait)10m0s
--tokenstringstatic admin token for the gateway posture (env MAQPNA_ADMIN_TOKEN)none

The global flags (--context, -o, --no-color, ...) work with every command.

What happens when you run it#

  • Uses the Kubernetes API of your kubeconfig (--kubeconfig, --kube-context, or the current context).
  • Talks to the gateway: --gateway, else MAQPNA_GATEWAY_URL, else the current context's gateway (maqpna context).
  • Authenticates to the admin API with the token stored by maqpna login, --oidc-token-file, or a static --token (MAQPNA_ADMIN_TOKEN).
  • Prints a table by default; -o json or -o yaml print the data, and --jq EXPR filters the JSON.

Exit codes#

CodeMeaning
0success
1error (the message says what failed, with a hint when there is one)
2usage error: unknown flag, missing argument or bad value; the synopsis is printed
3a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command)