maqpna cluster-info dump
Collect a support bundle (= maqpna support-bundle)
Synopsis#
maqpna cluster-info dump [support-bundle flags]Description#
From the help of maqpna cluster-info:
Prints the Kubernetes API server of the context, then each MAQPNA component (gateway, identity broker, attestation service, operator) with its URL, version and whether it answers. maqpna status shows the installed release and its workloads; maqpna doctor checks everything in depth; maqpna version --check enforces the version skew policy. cluster-info dump is maqpna support-bundle.
Flags#
| Flag | Type | Description | Default |
|---|---|---|---|
--agent-namespaces | switch | also collect pod lists and events of agent namespaces (no agent logs) | none |
--allow-gateway-mismatch | switch | send the context's login token to a gateway other than the one it was issued for (env MAQPNA_ALLOW_GATEWAY_MISMATCH=1) | none |
--debug | switch | print Helm's debug log to stderr | none |
--gateway | string | gateway base URL: adds the gateway posture to doctor.json | none |
--kube-context | string | kubeconfig context (default: the maqpna context's) | none |
-n, --namespace | string | namespace of the MAQPNA control plane (the Helm release) | maqpna-system |
--oidc-token-file | string | OIDC access token file (auditor/admin) | none |
--out | string | archive to write (default maqpna-support-YYYYMMDD-HHMMSS.tar.gz; - for stdout) | none |
--release | string | Helm release name | maqpna |
--since | duration | only logs newer than this (e.g. 24h; 0: no limit) | none |
--tail | int | log lines per container | 2000 |
--timeout | duration | timeout of Kubernetes operations (CRDs Established, --wait) | 10m0s |
--token | string | static admin token for the gateway posture (env MAQPNA_ADMIN_TOKEN) | none |
The global flags (--context, -o, --no-color, ...) work with every command.
What happens when you run it#
- Uses the Kubernetes API of your kubeconfig (
--kubeconfig,--kube-context, or the current context). - Talks to the gateway:
--gateway, elseMAQPNA_GATEWAY_URL, else the current context's gateway (maqpna context). - Authenticates to the admin API with the token stored by
maqpna login,--oidc-token-file, or a static--token(MAQPNA_ADMIN_TOKEN). - Prints a table by default;
-o jsonor-o yamlprint the data, and--jq EXPRfilters the JSON.
Exit codes#
| Code | Meaning |
|---|---|
0 | success |
1 | error (the message says what failed, with a hint when there is one) |
2 | usage error: unknown flag, missing argument or bad value; the synopsis is printed |
3 | a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command) |