oz0 tenant labels egress set

Set a level's egress list

For: Operators and developers looking up a command.

Set a level's egress list

Usage

oz0 tenant labels egress set LEVEL [--allow host]... [flags]

Flags

FlagTypeDefaultDescription
--allowstringArraya host a process may still reach, as egress entries read; repeatable; none allows no host
--decision-refstringthe decision or case the change follows, such as a case number (at most 200 characters)
--jsonboolprint JSON instead of a table
--reasonstringwhy, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026