mtls CLI command reference on Dapr Docs

mtls export CLI command reference

Mon, 01 Jan 0001 00:00:00 +0000

Description

Export the root Certificate Authority (CA), issuer cert and issuer key to local files

Supported platforms

Kubernetes

Usage

dapr mtls export [flags]

Flags

Name	Environment Variable	Default	Description
`--help`, `-h`			help for export
`--out`, `-o`		current directory	The output directory path to save the certs

Examples

# Check expiry of Kubernetes certs
dapr mtls export -o ./certs

Warning messages

This command can issue warning messages.

Root certificate renewal warning

If the mtls root certificate deployed to the Kubernetes cluster expires in under 30 days the following warning message is displayed:

mtls expiry CLI command reference

Mon, 01 Jan 0001 00:00:00 +0000

Description

Checks the expiry of the root Certificate Authority (CA) certificate

Supported platforms

Kubernetes

Usage

dapr mtls expiry [flags]

Flags

Name	Environment Variable	Default	Description
`--help`, `-h`			help for expiry

Examples

# Check expiry of Kubernetes certs
dapr mtls expiry

mtls renew certificate CLI command reference

Mon, 01 Jan 0001 00:00:00 +0000

Description

This command can be used to renew expiring Dapr certificates. For example the Dapr Sentry service can generate default root and issuer certificates used by applications. For more information see secure Dapr to Dapr communication

Supported platforms

Kubernetes

Usage

dapr mtls renew-certificate [flags]

Flags

Name	Default	Description
`--help`, `-h`		help for renew-certificate
`--kubernetes`, `-k`	`false`	supported platform
`--valid-until`	365 days	Validity for newly created certificates
`--restart`	false	Restarts Dapr control plane services (Sentry service, Operator service and Placement server)
`--timeout`	300 sec	The timeout for the certificate renewal process
`--ca-root-certificate`		File path to user provided PEM root certificate
`--issuer-public-certificate`		File path to user provided PEM issuer certificate
`--issuer-private-key`		File path to user provided PEM issue private key
`--private-key`		User provided root.key file which is used to generate root certificate

Examples

Renew certificates by generating brand new certificates

Generates new root and issuer certificates for the Kubernetes cluster with a default validity of 365 days. The certificates are not applied to the Dapr control plane.