mtls

Description

Check if mTLS is enabled.

Supported platforms

Usage

dapr mtls [flags]
dapr mtls [command]

Flags

Name Environment Variable Default Description
--help, -h Print this help message
--kubernetes, -k false Check if mTLS is enabled in a Kubernetes cluster

Available Commands

expiry              Checks the expiry of the root Certificate Authority (CA) certificate
export              Export the root Certificate Authority (CA), issuer cert and issuer key to local files
renew-certificate   Rotates the existing root Certificate Authority (CA), issuer cert and issuer key

Command Reference

You can learn more about each sub command from the links below.

Examples

# Check if mTLS is enabled on the Kubernetes cluster
dapr mtls -k

Warning messages

This command can issue warning messages.

Root certificate renewal warning

If the mtls root certificate deployed to the Kubernetes cluster expires in under 30 days the following warning message is displayed:

Dapr root certificate of your Kubernetes cluster expires in <n> days. Expiry date: <date:time> UTC. 
Please see docs.dapr.io for certificate renewal instructions to avoid service interruptions.
mtls export CLI command reference

Detailed information on the mtls export CLI command

mtls expiry CLI command reference

Detailed information on the mtls expiry CLI command

mtls renew certificate CLI command reference

Detailed information on the mtls renew certificate CLI command


Last modified November 19, 2024: Merge pull request #4407 from hhunter-ms/issue_3321 (1d418a4)