oz0 tenant labels egress
Usage and flags for oz0 tenant labels egress.
For: Operators and developers looking up a command.
For a job at a level or above, a harness session, a remote session and a tool server's own sandbox reach only the hosts on the list of the highest such level, and only those the other egress lists allow too: the list narrows, it never adds a host. An empty list allows no host. Calls through the tool gate are decided by rules (tenant tool-policy set --label-egress).
Adding a host to the list in force at any level, dropping a !entry, or removing a level's list loosens.
Usage
oz0 tenant labels egress [command]
Subcommands
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.