mtls

Description

Check if mTLS is enabled.

Supported platforms

Usage

  1. dapr mtls [flags]
  2. dapr mtls [command]

Flags

NameEnvironment VariableDefaultDescription
—help, -hPrint this help message
—kubernetes, -kfalseCheck if mTLS is enabled in a Kubernetes cluster

Available Commands

  1. expiry              Checks the expiry of the root Certificate Authority (CA) certificate
  2. export              Export the root Certificate Authority (CA), issuer cert and issuer key to local files
  3. renew-certificate   Rotates the existing root Certificate Authority (CA), issuer cert and issuer key

Command Reference

You can learn more about each sub command from the links below.

Examples

  1. # Check if mTLS is enabled on the Kubernetes cluster
  2. dapr mtls -k

Warning messages

This command can issue warning messages.

Root certificate renewal warning

If the mtls root certificate deployed to the Kubernetes cluster expires in under 30 days the following warning message is displayed:

  1. Dapr root certificate of your Kubernetes cluster expires in <n> days. Expiry date: <date:time> UTC. 
  2. Please see docs.dapr.io for certificate renewal instructions to avoid service interruptions.
mtls export CLI command reference

Detailed information on the mtls export CLI command

mtls expiry CLI command reference

Detailed information on the mtls expiry CLI command

mtls renew certificate CLI command reference

Detailed information on the mtls renew certificate CLI command

Last modified October 11, 2024: Fixed typo (#4389) (fe17926)