@@ -85,17 +85,33 @@ files containing a list of certificate thumbprints. To generate a template for t
8585```bash
8686kfutil stores rot generate-template --type certs
8787```
88+ To prepopulate the template file you can provide `--cn` multiple times.
89+ ```bash
90+ kfutil stores rot generate-template --type certs \
91+ --cn <cert subject name> \
92+ --cn <additional cert subject name>
93+ ```
94+
8895In addition, you must provide a list of stores you wish to audit. To generate a template for this file, run the following
8996command:
9097```bash
9198kfutil stores rot generate-template --type stores
9299```
100+ To prepopulate the template file you can provide `--store-type` and `--container-type` multiple times.
101+ ```bash
102+ kfutil stores rot generate-template --type stores \
103+ --store-type <store type name> \
104+ --store-type <additional store type name> \
105+ --container-type <container type name> \
106+ --container-type <additional container type name>
107+ ```
108+
93109With all the files generated and populated, you can now run the audit command:
94110```bash
95111kfutil stores rot audit \
96- --stores stores .csv \
97- --add-certs addCerts .csv \
98- --remove-certs removeCerts .csv
112+ --stores stores_template .csv \
113+ --add-certs certs_template .csv \
114+ --remove-certs certs_template2 .csv
99115```
100116This will generate an audit file that contains the results of the audit and actions that will be taken if `reconcile` is
101117executed. By default, the audit file will be named `rot_audit.csv` and will be written to the current directory. To output
@@ -118,17 +134,32 @@ files containing a list of certificate thumbprints. To generate a template for t
118134` ` ` bash
119135kfutil stores rot generate-template --type certs
120136` ` `
137+ To prepopulate the template file you can provide ` --cn` multiple times.
138+ ` ` ` bash
139+ kfutil stores rot generate-template --type certs \
140+ --cn < cert subject name> \
141+ --cn < additional cert subject name>
142+ ` ` `
121143In addition, you must provide a list of stores you wish to reconcile. To generate a template for this file, run the following
122144command:
123145` ` ` bash
124146kfutil stores rot generate-template --type stores
125147` ` `
148+ To pre-populate the stores template file you can provide multiple values in any combination of the following flags:
149+ ` ` ` bash
150+ kfutil stores rot generate-template --type stores \
151+ --store-type < store type name> \
152+ --store-type < additional store type name> \
153+ --container-type < container type name> \
154+ --container-type < additional container type name>
155+ ` ` `
156+
126157With all the files generated and populated, you can now run the reconcile command:
127158` ` ` bash
128159kfutil stores rot reconcile \
129- --stores stores .csv \
130- --add-certs addCerts .csv \
131- --remove-certs removeCerts .csv
160+ --stores stores_template .csv \
161+ --add-certs certs_template .csv \
162+ --remove-certs certs_template2 .csv
132163` ` `
133164This will generate an audit file that contains the results of the audit and actions will immediately execute those actions.
134165By default, the reconcile file will be named ` rot_audit.csv` and will be written to the current directory. To output
0 commit comments