Kubernetes Control Plane

Learn about actions >

• apply-manifest

  Apply JSON formatted Kubernetes manifest to cluster. juju run this action using --string-args

  Params

  • json string

    The content of the manifest to deploy in JSON format

  Required

  json

• cis-benchmark

  Run the CIS Kubernetes Benchmark against snap-based components.

  Params

  • apply string

    Apply remedies to address benchmark failures. The default, 'none', will not attempt to fix any reported failures. Set to 'conservative' to resolve simple failures. Set to 'dangerous' to attempt to resolve all failures.

    Note: Applying any remediation may result in an unusable cluster.

  • config string

    Archive containing configuration files to use when running kube-bench. The default value is known to be compatible with snap components. When using a custom URL, append '#<hash_type>=<checksum>' to verify the archive integrity when downloaded.

  • release string

    Archive containing the 'kube-bench' binary to run. The default value points to a stable upstream release. When using a custom URL, append '#<hash_type>=<checksum>' to verify the archive integrity when downloaded.

    This may also be set to the special keyword 'upstream'. In this case, the action will compile and use a local kube-bench binary built from the default branch of the upstream repository: https://github.com/aquasecurity/kube-bench

• get-kubeconfig

  Retrieve Kubernetes cluster config, including credentials

• namespace-create

  Create new namespace

  Params

  • name string

    Namespace name eg. staging

  Required

  name

• namespace-delete

  Delete namespace

  Params

  • name string

    Namespace name eg. staging

  Required

  name

• namespace-list

  List existing k8s namespaces

• restart

  Restart the Kubernetes control-plane services on demand.

• upgrade

  Upgrade the Kubernetes snaps

• user-create

  Create a new user

  Params

  • groups string

    Optional comma-separated list of groups eg. 'system:masters,managers'

  • name string

    Username for the new user. This value must only contain alphanumeric characters, ':', '@', '-' or '.'.

  Required

  name

• user-delete

  Delete an existing user

  Params

  • name string

    Username of the user to delete

  Required

  name

• user-list

  List existing users