oz0 server ca
The cluster CA signs node, operator and server certificates.
For: Operators and developers looking up a command.
The cluster CA signs node, operator and server certificates. Its key is sealed in the database under the master key, unless a signing command holds it outside the server. To move an existing cluster's key: export it, import it into the HSM or KMS, start every server with --ca-signer-command, then forget the sealed copy. A new cluster can start that way with server init --ca-signer-command.
Usage
oz0 server ca [command]
Subcommands
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.