Skip to main content

authz policy update

Update a policy

Synopsis

Updates a policy's display name, description or annotations.

authz policy update [flags]

Options

      --annotation key=value   Policy annotations in key=value format. Can be specified multiple times.
--description string Policy description.
--display-name string Policy display name.
--policy string A name of the policy to update.
--replace-annotations When used we'll replace all policy annotations with the provided ones.

Options inherited from parent commands

      --bypass-authorization         When sets the intent to bypass authorization is indicated to the server. User requires to be explicitly allowed to bypass authorization on the server side. Only some of the commands can be bypassed. This is intended to be used as an escape hatch in case of misconfiguration or other issues that prevent users from accessing the server. Please use with caution.
--config string Sets the path to the config file. Default is $XDG_CONFIG_HOME/h2o.ai/authz-cli.yaml, $HOME/.config/h2o.ai/authz-cli.yaml or content of H2O_AUTHZ_CLI_CONFIG environment variable.
--debug Enables more verbose output.
--environment string Sets the environment to use when running commands. Overrides the environment set in the config file(s). By default, environment is used to discover address of the authZ server(s).
--h2o-config string Sets H2O CLI config file path. Default is ~/.h2oai/h2o-cli-config.toml or content of H2OCONFIG environment variable.
--help Show help for command.
--platform-token-file string Overrides the platform token used for authentication. Token is read from the specified file. You can also use H2O_AUTHZ_CLI_PLATFORM_TOKEN_FILE environment variable. By default, Token is read from the environment or from the H2O CLI config.
--server string Overrides the server URL. Default is discovered address.
--token-file string Overrides the access token used for authentication. Token is read from the specified file. You can also use H2O_AUTHZ_CLI_TOKEN_FILE environment variable. By default, platform token is used to get the access token from the discovered issuer.
--version Show authz version.

SEE ALSO


Feedback