chainctl auth login

chainctl auth login

Login to the Chainguard platform.

chainctl auth login [--identity-token TOKEN] [--invite-code INVITE_CODE | --register] [--create-group] [--cluster CLUSTER_ID] [--refresh] [flags]

Examples


# Default auth login flow:
chainctl auth login

# Refreshing a token within a Kubernetes context:
chainctl auth login --identity-token=PATH_TO_TOKEN --refresh

Options

      --cluster string          UID of the Cluster.
      --create-group            Whether a new root group should be created if an invite code is not specified. (default true)
  -h, --help                    help for login
      --identity-token string   Use an explicit passed identity token or token path.
      --invite-code string      Registration invite code.
      --refresh                 Enable auto refresh of the Chainguard token (for workloads).
      --register                Register a new account if needed. Will create a new root group when an invite code is not specified.

Options inherited from parent commands

      --api string        The url of the Chainguard platform API. (default "http://api.api-system.svc")
      --audience string   The Chainguard token audience to request. (default "http://api.api-system.svc")
      --config string     A specific chainctl config file.
      --console string    The url of the Chainguard platform Console. (default "http://console-ui.api-system.svc")
      --issuer string     The url of the Chainguard STS endpoint. (default "http://issuer.oidc-system.svc")
  -o, --output string     Output format. One of: ["", "table", "tree", "json", "id", "wide"]

SEE ALSO

  • chainctl auth - Auth related commands for the Chainguard platform.