timoni bundle apply

timoni bundle apply [flags]

  # Install all instances from a bundle
  timoni bundle apply -f bundle.cue

  # Do a dry-run upgrade and print the diff
  timoni bundle apply -f bundle.cue \
  --dry-run --diff

  # Force apply instances from multiple bundles
  timoni bundle apply --force \
  -f ./bundle.cue \
  -f ./bundle_secrets.cue

  # Pass secret values from stdin
  cat ./bundle_secrets.cue | timoni bundle apply -f ./bundle.cue -f -

      --creds creds           The credentials for the container registry in the format '<username>[:<password>]'.
      --diff                  Perform a server-side apply dry run and prints the diff. Exits with code 1 if drift is detected and code 2 on errors.
      --dry-run               Perform a server-side apply dry run.
  -f, --file strings          The local path to bundle.cue files.
      --force                 Recreate immutable Kubernetes resources.
  -h, --help                  help for apply
      --overwrite-ownership   Overwrite instance ownership, if any instances are owned by other Bundles.
  -p, --package package       The name of the module's package used for building the templates. (default main)
      --validate              Validate the custom resources against their CRD schemas and CEL rules. (default true)
      --wait                  Wait for the applied Kubernetes objects to become ready. (default true)

      --cache-dir string                    Artifacts cache dir, can be disable with 'TIMONI_CACHING=false' env var. (defaults to "$HOME/.timoni/cache")
      --kube-as string                      Username to impersonate for the operation. User could be a regular user or a service account in a namespace.
      --kube-as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --kube-as-uid string                  UID to impersonate for the operation.
      --kube-certificate-authority string   Path to a cert file for the certificate authority.
      --kube-client-certificate string      Path to a client certificate file for TLS.
      --kube-client-key string              Path to a client key file for TLS.
      --kube-context string                 The name of the kubeconfig context to use.
      --kube-insecure-skip-tls-verify       if true, the Kubernetes API server's certificate will not be checked for validity. This will make your HTTPS connections insecure.
      --kube-server string                  The address and port of the Kubernetes API server.
      --kube-tls-server-name string         Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used.
      --kube-token string                   Bearer token for authentication to the API server.
      --kubeconfig string                   Path to the kubeconfig file.
      --log-color                           Adds colorized output to the logs. (defaults to false when no tty)
      --log-pretty                          Adds timestamps to the logs. (default true)
  -n, --namespace string                    The the namespace scope for the operation. (default "default")
      --registry-insecure                   If true, allows connecting to a container registry without TLS or with a self-signed certificate.
  -r, --runtime strings                     The local path to runtime.cue files.
      --runtime-cluster string              Filter runtime cluster by name. (default "*")
      --runtime-from-env                    Inject runtime values from the environment.
      --runtime-group string                Filter runtime clusters by group. (default "*")
      --timeout duration                    The length of time to wait before giving up on the current operation. (default 5m0s)
      --workdir string                      The local path to the CUE module root (the directory containing cue.mod), used to resolve imports in the bundle and runtime definitions. Defaults to the current directory.