nebula authority
Manage the Nebula authority server.
Subcommands
nebula authority list
The nebula authority list
command lists the authorities that are registered into the backbone server.
The command returns the authority name and host of each authority.
nebula authority add
The nebula authority add
command registers an authority into the backbone server.
Flags
-n, --name <authority_name>
: The name of the authority to add. (optional)-h, --host <authority_host>
: The host of the authority to add. (optional)
nebula authority init
The nebula authority init
command initializes the authority server for storing the key pair safely.
Flags
-n, --name <authority_name>
: The name of the authority to initialize. You should provide a same name for the authority that you want to initialize.--shares <secret_shares>
: The number of secret shares to generate. (optional)--threshold <secret_threshold>
: The number of shares required to reconstruct the secret. (optional)--file <file_path>
: The output file path to store the secret shares. (optional)
nebula authority disarm
The nebula authority disarm
command disarms the key shares on the authority server.
Disarming with the key shares means that the authority server reconstructs the root key from the key shares and obtains the plaintext decryption key.
Flags
-n, --name <authority_name>
: The name of the authority to disarm. You should provide a same name for the authority that you want to disarm.