--admin-password-file
|
string
|
|
a file with the web UI admin's first password (at least 12 characters), instead of one made up and printed
|
--advertise
|
string
|
127.0.0.1
|
server address to put in the operator's CLI context
|
--ca-signer-command
|
command
|
|
a command that signs with the cluster CA's key outside the server, such as in an HSM or a KMS: "COMMAND public-key" prints the key as PEM, "COMMAND sign sha256" signs the digest on stdin; the cluster CA is created with its key, and the database keeps no copy
|
--cluster-name
|
string
|
oz0
|
cluster name (lowercase letters, digits, dashes)
|
--data-dir
|
string
|
~/.local/share/orchestrator-zero
|
server data directory
|
--db-file
|
file
|
|
a file (- for stdin) holding the PostgreSQL URL of the management database, such as postgres://oz0:PASSWORD@db:5432/oz0 (or set OZ0_DB); the URL can carry a password, so it never goes on the command line
|
--exist-ok
|
bool
|
|
when the database holds a cluster already, check that --master-key-file unseals it and exit without changing anything, so a job can run init before every install
|
--history-shards
|
int
|
1024
|
Temporal history shards; can never change
|
--master-key-command
|
command
|
|
a command that unwraps the master key from --master-key-file when the file holds it wrapped, such as with an HSM or a KMS: "COMMAND unwrap" prints the key from the wrapped document on stdin, "COMMAND wrap" wraps one, "COMMAND describe" says what holds the wrapping key (see the docs on key commands) (or set OZ0_MASTER_KEY_COMMAND)
|
--master-key-file
|
string
|
|
use this master key, made beforehand and kept in a secret store such as a Kubernetes Secret, instead of writing a new one (32 random bytes in base64: head -c 32 /dev/urandom | base64)
|
--master-key-out
|
string
|
<data-dir>/master.key
|
where to write the master key
|
--operator
|
string
|
admin
|
first operator
|
--operator-dir
|
string
|
<config dir>/orchestrator-zero/<cluster>
|
where to write the operator's credentials
|
--release-channel
|
channel
|
the channel of the release in this server's dist folder, else stable
|
the release channel the cluster follows: stable, preview or lts-<major>.<minor>
|
--roles-apart
|
bool
|
|
check what management apart from the edges needs of the database: CREATEROLE for its user, and pg_hba.conf letting the edges' role log in with a password from this host; fails with what to change
|
--temporal-backend
|
string
|
embedded
|
the Temporal backend the servers will run against: embedded sets up Temporal's schemas in this PostgreSQL; external and cloud leave Temporal's database alone
|
--tenant
|
string
|
default
|
first tenant; its Temporal namespace has the same name
|