monedula-acl-rbac discover

Query MDS for cluster IDs and emit a scopes.yaml stub. Usage and flags for monedula-acl-rbac discover.

Reference 14 of 29

Reference for monedula-acl-rbac-converter v0.10.0

Updated 2 October 2026

usage

monedula-acl-rbac discover [flags]

Read-only: this command does not change the cluster.

Flags

Flag	Type	Default	Description
`--out`	string		Output path (default: stdout)
`--mds-url`	string		MDS base URL (required)
`--mds-ca-cert`	string		Path to a PEM CA bundle for MDS TLS
`--mds-client-cert`	string		Path to a PEM client certificate for mTLS to MDS
`--mds-client-key`	string		Path to a PEM client key for mTLS to MDS
`--mds-insecure-skip-verify`	bool		Skip TLS certificate verification
`--mds-user`	string		MDS username
`--mds-password-file`	string		Path to a file containing the MDS password
`--mds-token-file`	string		Path to a pre-fetched MDS bearer token file
`--cache-token`	bool		Persist the resolved token to the user config dir
`--mds-max-retries`	int	`3`	Retry transient MDS failures (5xx, 429, connection reset) up to N additional times after the initial call; pass 0 to disable retries

Flag	Type	Default	Description
`--log-format`	string	`text`	Log output format (text\|json); set MONEDULA_ACL_RBAC_LOG_FORMAT to override the default.
`--log-level`	string	`info`	Log level (debug\|info\|warn\|error); set MONEDULA_ACL_RBAC_LOG_LEVEL to override the default.

examples

monedula-acl-rbac discover --mds-url https://mds.example.com > scopes.yaml

Code	Meaning
`0`	Success.
`1`	Usage error: missing required flag, malformed argument, or unknown subcommand.
`4`	External system error: MDS unreachable or unauthorized, Kafka unreachable or auth failure, or the Kubernetes API unreachable, unauthorized, or RBAC denied.