USAGE.md

Galadriel Server CLI

The Galadriel Server CLI contains the functionality to:

galadriel-server create member

Flag	Type	Required	Description
-t, --trustDomain	string	Yes	SPIRE server trust domain

galadriel-server create relationship

Flag	Type	Required	Description
-a, --trustDomainA	string	Yes	SPIRE Server trust domain A
-b, --trustDomainB	string	Yes	SPIRE Server trust domain B

galadriel-server generate token

Flag	Type	Required	Description
-t, --trustDomain	string	Yes	SPIRE server trust domain

galadriel-server list

Command	Description
members	List all members stored in the Galadriel Server
relationships	List all relationships stored in the Galadriel Server

Galadriel Harvester CLI

The Galadriel Harvester CLI contains the functionality to run the Galadriel Harvester while attaching it to the Galadriel Server instance, based on the token used as a argument:

galadriel-harvester run

Flag	Type	Required	Description
-t, --token	string	Yes	Token generated by the Galadriel Server for this trust domain
-c, --config	string		Config file path. If not set uses the default value: conf/harvester/harvester.conf

Galadriel Server Configuration File

You can find the default Galadriel Server configuration file at conf/server/server.conf

Configuration	Description	Default
listen_address	IP address or DNS name of the Galadriel server.	localhost
listen_port	HTTP Port number of the Galadriel server.	8085
socket_path	Path to bind the Galadriel Server API socket to.	/tmp/galadriel-server/api.sock
log_level	Application log level. One of: TRACE, DEBUG, INFO, WARN, ERROR, FATAL, PANIC	INFO

Galadriel Harvester Configuration File

You can find the default Galadriel Harvester configuration file at conf/harvester/harvester.conf

Configuration	Description	Required	Default
spire_socket_path	SPIRE Server Socket of the instance to manage.		/tmp/spire-server/private/api.sock
server_address	Upstream Galadriel Server DNS name or IP address with port.	Yes
bundle_updates_interval	Sets how often to check for bundle rotation.		30s
log_level	Application log level. One of: TRACE, DEBUG, INFO, WARN, ERROR, FATAL, PANIC		INFO