Unreleased (main)
These are the development docs; they can describe changes no release has yet.
ichor cluster discovery add
Scan one more IPv4 address or range (/24 or smaller) for machines in maintenance mode
Synopsis
Add an IPv4 address (192.168.0.50) or a range (192.168.0.0/24) to the cluster's spec.discovery. A range is scanned address by address (at most 256 per range, at most 4 ranges). The scan starts right away; machines found appear as pending (see "ichor machine list") and wait for approval.
ichor cluster discovery add ADDRESS|CIDR [flags]
Options
-h, --help help for add
Options inherited from parent commands
--bundle-passphrase-file string file holding the passphrase of the local secrets bundle; any readable path, e.g. /dev/fd/3; otherwise $ICHOR_BUNDLE_PASSPHRASE, then a prompt on a terminal. Never a value on the command line
--ca-file string PEM file of the CA that signed ichor-ui's serving certificate, when ichor-ui serves TLS (env ICHOR_CA_FILE)
--cluster string TalosCluster (in --namespace) to edit; optional when the namespace has exactly one
--ichor-namespace string namespace Ichor is installed in (where ichor-ui runs and the secrets bundle lives) (default "ichor-system")
--kubeconfig string path to the kubeconfig for the cluster's Kubernetes API; defaults to $KUBECONFIG, then ~/.kube/config
--local do not use ichor-ui; compute from the Kubernetes API directly
-n, --namespace string namespace of the Ichor resources the command names (default "ichor-system")
-o, --output string output format: "yaml" or "json" for scripts; by default a command prints for people (commands without a human view print YAML)
--override incident only: override a safety check (reset a node, restore etcd, reboot or shut down the last worker, an upgrade the compatibility table refuses); needs the override RBAC verb on the resource; implies --local
--talosconfig string path to the talosconfig used to reach each node's Talos API; defaults to $TALOSCONFIG, then ~/.talos/config
--tls-server-name string name on ichor-ui's serving certificate, when it is not the Service's DNS name (<service>.<namespace>.svc)
--yes skip interactive confirmation before a dangerous operation
SEE ALSO
- ichor cluster discovery - List, add or remove the addresses and ranges Ichor scans for new machines