Skip to content

cub run generate-kubecontext

cub run generate-kubecontext

Generates a time-bound kubeconfig for an existing ServiceAccount. The ServiceAccount must have the confighub.com/generate-kubecontext: allow annotation. The kubeconfig is encrypted with the caller's X25519 public key. Supported toolchains: Kubernetes/YAML

cub run generate-kubecontext [flags]

Options

  -h, --help                help for generate-kubecontext
      --public-key string   (required) Base64-encoded X25519 public key for encrypting the kubeconfig response
      --ttl string          Requested token TTL (e.g., 30m, 1h); capped by access-max-ttl annotation

Options inherited from parent commands

      --change-desc string      change description
      --changeset string        changeset to associate units with
      --context string          The context to use for this command
      --debug                   Debug output
      --dry-run                 dry run mode: execute functions but skip updating configuration data
      --executor-space string   Space ID or slug whose executor to use for builtin functions (org-level only)
      --filter string           filter to apply (slug, space/filter, or UUID)
      --livestate-type string   Invoke the function on the live state and use the flag value as the toolchain type for live state.
  -o, --output string           Output format. One of: json, yaml, name, wide, mutations, jq=<expr>, yq=<expr>, custom-columns=<spec>
      --quiet                   No output
      --resource-type string    resource-type filter
      --show string             Select which part of the function response to display. One of: output, values, data
      --space string            space ID to perform command on
      --toolchain string        Toolchain type for the function invocations (default "Kubernetes/YAML")
      --unit strings            target specific units by slug or UUID (can be repeated or comma-separated)
      --wait                    wait for completion
      --where string            where filter
      --where-data string       where data filter
      --where-resource string   filter which resources the function operates on
      --worker string           worker to execute the function

SEE ALSO