roxctl sensor

--ca string

Specify a custom CA certificate file path for secure connections. Alternatively, you can specify the file path by using the ROX_CA_CeRT_FILe environment variable.

--direct-grpc

Set --direct-grpc for improved connection performance. Alternatively, by setting the ROX_DIReCT_GRPC_CLIeNT environment variable to true, you can enable direct gRPC . The default value is false.

-e, --endpoint string

Set the endpoint for the service to contact. Alternatively, you can set the endpoint by using the ROX_eNDPOINT environment variable. The default value is localhost:8443.

--force-http1

Force the use of HTTP/1 for all connections. Alternatively, by setting the ROX_CLIeNT_FORCe_HTTP1 environment variable to true, you can force the use of HTTP/1. The default value is false.

--insecure

enable insecure connection options. Alternatively, by setting the ROX_INSeCURe_CLIeNT environment variable to true, you can enable insecure connection options. The default value is false.

--insecure-skip-tls-verify

--no-color

Disable the color output. Alternatively, by setting the ROX_NO_COLOR environment variable to true, you can disable the color output. The default value is false.

-p, --password string

Specify the password for basic authentication. Alternatively, you can set the password by using the ROX_ADMIN_PASSWORD environment variable.

--plaintext

Use an unencrypted connection. Alternatively, by setting the ROX_PLAINTeXT environment variable to true, you can enable an unencrypted connection. The default value is false.

-s, --server-name string

Set the TLS server name to use for SNI. Alternatively, you can set the server name by using the ROX_SeRVeR_NAMe environment variable.

--token-file string

Use the API token provided in the specified file for authentication. Alternatively, you can set the token by using the ROX_API_TOKeN environment variable.

--admission-controller-disable-bypass

Disable the bypass annotations for the admission controller. The default value is false.

--admission-controller-enforce-on-creates

Dynamic enable for enforcing on object creation in the admission controller. The default value is false.

--admission-controller-enforce-on-updates

enable dynamic enforcement of object updates in the admission controller. The default value is false.

--admission-controller-listen-on-creates

Configure the admission controller webhook to listen to deployment creation. The default value is false.

--admission-controller-listen-on-updates

Configure the admission controller webhook to listen to deployment updates. The default value is false.

--admission-controller-scan-inline

Get scans inline when using the admission controller. The default value is false.

--admission-controller-timeout int32

Set the timeout in seconds for the admission controller. The default value is 3.

--central string

Set the endpoint to which you want to connect Sensor. The default value is central.stackrox:443.

--collection-method collection method

Specify the collection method that you want to use for runtime support. Collection methods include none, default, ebpf and core_bpf. The default value is default.

--collector-image-repository string

Set the image repository that you want to use to deploy Collector. If not specified, a default value corresponding to the effective --main-image repository value is derived.

--continue-if-exists

Continue with downloading the sensor bundle even if the cluster already exists. The default value is false.

--create-upgrader-sa

Decide whether to create the upgrader service account with cluster-admin privileges to facilitate automated sensor upgrades. The default value is true.

--disable-tolerations

Disable tolerations for tainted nodes. The default value is false.

--enable-pod-security-policies

Create PodSecurityPolicy resources. The default value is true.

--istio-support string

Generate deployment files that support the specified Istio version. Valid versions include 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7.

--main-image-repository string

Specify the image repository that you want to use to deploy Sensor. If not specified, a default value is used.

--name string

Set the cluster name to identify the cluster.

--output-dir string

Set the output directory for the bundle contents. The default value is an automatically generated directory name inside the current directory.

--slim-collector string[="true"]

Use Collector-slim in the deployment bundle. Valid values include auto, true, and false. The default value is auto.

-t, --timeout duration

Set the timeout for API requests representing the maximum duration of a request. The default value is 5m0s.

--create-upgrader-sa

Specify whether to create the upgrader service account with cluster-admin privileges for automated Sensor upgrades. The default value is true.

--istio-support string

Generate deployment files that support the specified Istio version. Valid versions include 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, and 1.7.

--output-dir string

Specify the output directory for the bundle contents. The default value is an automatically generated directory name inside the current directory.

--slim-collector string[="true"]

Use Collector-slim in the deployment bundle. Valid values include auto, true and false. The default value is auto.

-t, --timeout duration

Set the timeout for API requests representing the maximum duration of a request. The default value is 5m0s.

--output-dir string

Specify the output directory for the YAML file. The default value is ..