Skip to content

mkectl apply

mkectl apply#

Apply a configuration to a cluster

mkectl apply [flags]

Options#

      --admin-password string            Password for the default admin user
      --bpf-dns-patch                    Patch DNS for tigera-operator in BPF mode to make EC2 DNS work in tigera-operator pods
      --chart-registry-password string   Password for authenticating pulls from the chart registry. Requires --chart-registry-username. May instead be set via the MKE_CHART_REGISTRY_PASSWORD environment variable.
      --chart-registry-username string   Username for authenticating pulls from the chart registry. Requires --chart-registry-password and spec.registries.chartRegistry.credentialsSecretName. Needed on fresh install or to change stored credentials; on re-apply the credentials in the referenced Secret are reused.
      --check-ports                      Verify node-to-node connectivity for every required port before proceeding, and abort if any is blocked or held by a conflicting process. Equivalent to running 'mkectl check ports' first; adds an SSH round trip and a short-lived probe upload per node.
      --cni-check-port int32             Use specified port number for verifying networking availability post CNI install (default 80)
      --cni-check-timeout int            Use specified timeout(in minutes) around verifying networking availability post CNI install (default 15)
      --cni-check-timeout-windows int    Use specified timeout(in minutes) around verifying Windows networking (node CNI readiness, pod DNS, pod connectivity); only applied when the cluster has Windows hosts (default 25)
      --collect-facts-timeout duration   Timeout for the collect-facts phase (gathering per-host facts such as cgroup version over SSH) (default 5m0s)
      --concurrency int                  Maximum number of nodes to configure in parallel, set to 0 for unlimited (default 30)
      --dry-run                          Simulate the apply process without making any changes
      --feature-gates string             MKE operator feature gates list, formatted formatted as "key1=value1,key2=value2,..."
      --force                            Bypass user confirmations. This will apply changes without any confirmations
  -h, --help                             help for apply
      --image-registry-password string   Password for authenticating pulls from the image registry. Requires --image-registry-username. May instead be set via the MKE_IMAGE_REGISTRY_PASSWORD environment variable.
      --image-registry-username string   Username for authenticating pulls from the image registry. Requires --image-registry-password and spec.registries.imageRegistry.credentialsSecretName. Needed on fresh install or to change stored credentials; on re-apply the credentials in the referenced Secret are reused.
      --lease-adopt-stale                if true, matching stale lease would be adopted instead of failing with error
      --lease-renew-interval duration    lease renew interval for cluster-wide/node operations, should be < leaseTTL (default 20s)
      --lease-ttl duration               lease TTL for cluster-wide/node operations (default 1m0s)
      --port-probe-dir string            Remote directory to upload and run the port probe from when --check-ports is set; use an exec-capable path when /tmp is mounted noexec (default "/tmp")
      --skip-addon-wait                  Do not wait for MKE addons to become deployed
      --skip-cni-check                   Do not verify that networking is available
      --skip-cpu-cores-check             Do not run the check for sufficient CPU cores on nodes (default true)
      --skip-image-presence-check        Skip the image presence in registry check in airgap mode
      --skip-os-check                    Skip the supported-OS-variant check. Use when nodes are running an OS patch level not yet on the supported list. The compatibility matrix in the docs remains the source of truth for officially supported variants. (default true)
      --skip-storage-check               Skip storage checks (default true)
      --skip-total-memory-check          Do not run the check for sufficient memory on nodes (default true)
      --skip-wait-k8s-ready-check        Skip waiting for k8s API reachable after creating/modifying cluster with k0sctl
      --support-dump-no-sudo             Use support dump commands without sudo for collecting support dump for the cluster
      --support-dump-timeout int         Use specified timeout(in minutes) around collecting support dump for the cluster (default 20)
      --timeout-minutes int              Use specified timeout(in minutes) around the entirety of apply/install (default 60)

Options inherited from parent commands#

  -f, --file string              path to the config file. Not needed for restore where config is loaded from the backup (default "mke4.yaml")
      --kubeconfig string        path to the kubeconfig file of the existing or restored cluster. DO NOT USE when creating a new cluster (default "/home/runner/.mke/mke.kubeconf")
  -l, --logLevel string          specify a log level (info, warn, debug, trace, error) (default "info")
      --no-color                 when provided, disables colored output
      --no-pretty-print          when provided, disables pretty print output formatting
      --version version[=true]   --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version