nebula/e2e/testdata/commands_output.golden

$ version
e2e-test

$ version -json
{"version":"e2e-test"}

$ version -pretty
{
    "version": "e2e-test"
}

$ device-info
name= cidr=[10.222.0.1/24]

$ device-info -json
{"name":"","cidr":["10.222.0.1/24"]}

$ device-info -pretty
{
    "name": "",
    "cidr": [
        "10.222.0.1/24"
    ]
}

$ list-hostmap

$ list-hostmap -json
[]

$ list-hostmap -pretty
[]

$ list-hostmap -by-index

$ list-hostmap -json -by-index
[]

$ list-hostmap -pretty -by-index
[]

$ list-pending-hostmap
[10.222.0.9]: []

$ list-pending-hostmap -json
[{"vpnAddrs":["10.222.0.9"],"localIndex":<n>,"remoteIndex":<n>,"remoteAddrs":[],"cert":null,"messageCounter":<n>,"currentRemote":"","currentRelaysToMe":[],"currentRelaysThroughMe":[]}]

$ list-pending-hostmap -pretty
[
    {
        "vpnAddrs": [
            "10.222.0.9"
        ],
        "localIndex": <n>,
        "remoteIndex": <n>,
        "remoteAddrs": [],
        "cert": null,
        "messageCounter": <n>,
        "currentRemote": "",
        "currentRelaysToMe": [],
        "currentRelaysThroughMe": []
    }
]

$ list-pending-hostmap -by-index

$ list-pending-hostmap -json -by-index
[]

$ list-pending-hostmap -pretty -by-index
[]

$ list-lighthouse-addrmap
10.222.0.9: {}

$ list-lighthouse-addrmap -json
[{"vpnAddr":"10.222.0.9","addrs":{}}]

$ list-lighthouse-addrmap -pretty
[
    {
        "vpnAddr": "10.222.0.9",
        "addrs": {}
    }
]

$ print-cert
{
	"details": {
		"curve": "CURVE25519",
		"groups": [],
		"isCa": false,
		"issuer": "<hex>",
		"name": "output-golden",
		"networks": [
			"10.222.0.1/24"
		],
		"notAfter": "<time>",
		"notBefore": "<time>",
		"publicKey": "<hex>",
		"unsafeNetworks": []
	},
	"fingerprint": "<hex>",
	"signature": "<hex>",
	"version": 1
}

$ print-cert -json
{"details":{"curve":"CURVE25519","groups":[],"isCa":false,"issuer":"<hex>","name":"output-golden","networks":["10.222.0.1/24"],"notAfter":"<time>","notBefore":"<time>","publicKey":"<hex>","unsafeNetworks":[]},"fingerprint":"<hex>","signature":"<hex>","version":1}

$ print-cert -pretty
{
    "details": {
        "curve": "CURVE25519",
        "groups": [],
        "isCa": false,
        "issuer": "<hex>",
        "name": "output-golden",
        "networks": [
            "10.222.0.1/24"
        ],
        "notAfter": "<time>",
        "notBefore": "<time>",
        "publicKey": "<hex>",
        "unsafeNetworks": []
    },
    "fingerprint": "<hex>",
    "signature": "<hex>",
    "version": 1
}

$ print-cert -raw
-----BEGIN NEBULA CERTIFICATE-----
<pem>
-----END NEBULA CERTIFICATE-----

$ print-cert -json -raw
{"pem":"-----BEGIN NEBULA CERTIFICATE-----\n<pem>\n-----END NEBULA CERTIFICATE-----\n"}

$ print-cert -pretty -raw
{
    "pem": "-----BEGIN NEBULA CERTIFICATE-----\n<pem>\n-----END NEBULA CERTIFICATE-----\n"
}

$ print-cert 10.222.0.9
Could not find tunnel for vpn addr: 10.222.0.9
exit status 1

$ print-cert -json 10.222.0.9
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
exit status 1

$ print-cert -pretty 10.222.0.9
{
    "ok": false,
    "reason": "Could not find tunnel for vpn addr: 10.222.0.9"
}
exit status 1

$ print-cert 10.222.0.9 -json
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
exit status 1

$ print-cert -json 10.222.0.9 -json
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
exit status 1

$ print-cert -pretty 10.222.0.9 -json
{
    "ok": false,
    "reason": "Could not find tunnel for vpn addr: 10.222.0.9"
}
exit status 1

$ print-cert 10.222.0.250
Could not find tunnel for vpn addr: 10.222.0.250
exit status 1

$ print-cert -json 10.222.0.250
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.250"}
exit status 1

$ print-cert -pretty 10.222.0.250
{
    "ok": false,
    "reason": "Could not find tunnel for vpn addr: 10.222.0.250"
}
exit status 1

$ print-cert not-an-address
The provided vpn addr could not be parsed: not-an-address
exit status 1

$ print-cert -json not-an-address
{"ok":false,"reason":"The provided vpn addr could not be parsed: not-an-address"}
exit status 1

$ print-cert -pretty not-an-address
{
    "ok": false,
    "reason": "The provided vpn addr could not be parsed: not-an-address"
}
exit status 1

$ whoami
name: output-golden
vpn addrs: 10.222.0.1
networks: 10.222.0.1/24
unsafe networks: 
groups: 
fingerprint: <hex>
issuer: <hex>
not before: <time>
not after: <time>
cert version: 1

$ whoami -json
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}

$ whoami -pretty
{
    "name": "output-golden",
    "vpnAddrs": [
        "10.222.0.1"
    ],
    "networks": [
        "10.222.0.1/24"
    ],
    "unsafeNetworks": [],
    "groups": [],
    "fingerprint": "<hex>",
    "issuer": "<hex>",
    "notBefore": "<time>",
    "notAfter": "<time>",
    "certVersion": 1
}

$ whoami x
whoami takes no arguments
exit status 1

$ whoami -json x
{"ok":false,"reason":"whoami takes no arguments"}
exit status 1

$ whoami -pretty x
{
    "ok": false,
    "reason": "whoami takes no arguments"
}
exit status 1

$ identity
No vpn addr was provided, use -address <vpn addr>[:port]; whoami prints this node's own identity
exit status 1

$ identity -json
{"ok":false,"reason":"No vpn addr was provided, use -address \u003cvpn addr\u003e[:port]; whoami prints this node's own identity"}
exit status 1

$ identity -pretty
{
    "ok": false,
    "reason": "No vpn addr was provided, use -address \u003cvpn addr\u003e[:port]; whoami prints this node's own identity"
}
exit status 1

$ identity -address 10.222.0.1
name: output-golden
vpn addrs: 10.222.0.1
networks: 10.222.0.1/24
unsafe networks: 
groups: 
fingerprint: <hex>
issuer: <hex>
not before: <time>
not after: <time>
cert version: 1

$ identity -json -address 10.222.0.1
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}

$ identity -pretty -address 10.222.0.1
{
    "name": "output-golden",
    "vpnAddrs": [
        "10.222.0.1"
    ],
    "networks": [
        "10.222.0.1/24"
    ],
    "unsafeNetworks": [],
    "groups": [],
    "fingerprint": "<hex>",
    "issuer": "<hex>",
    "notBefore": "<time>",
    "notAfter": "<time>",
    "certVersion": 1
}

$ identity -address 10.222.0.1:4242
name: output-golden
vpn addrs: 10.222.0.1
networks: 10.222.0.1/24
unsafe networks: 
groups: 
fingerprint: <hex>
issuer: <hex>
not before: <time>
not after: <time>
cert version: 1

$ identity -json -address 10.222.0.1:4242
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}

$ identity -pretty -address 10.222.0.1:4242
{
    "name": "output-golden",
    "vpnAddrs": [
        "10.222.0.1"
    ],
    "networks": [
        "10.222.0.1/24"
    ],
    "unsafeNetworks": [],
    "groups": [],
    "fingerprint": "<hex>",
    "issuer": "<hex>",
    "notBefore": "<time>",
    "notAfter": "<time>",
    "certVersion": 1
}

$ identity -address 10.222.0.9
No active tunnel for vpn addr: 10.222.0.9
exit status 1

$ identity -json -address 10.222.0.9
{"ok":false,"reason":"No active tunnel for vpn addr: 10.222.0.9"}
exit status 1

$ identity -pretty -address 10.222.0.9
{
    "ok": false,
    "reason": "No active tunnel for vpn addr: 10.222.0.9"
}
exit status 1

$ identity -address not-an-address
The provided vpn addr could not be parsed: not-an-address
exit status 1

$ identity -json -address not-an-address
{"ok":false,"reason":"The provided vpn addr could not be parsed: not-an-address"}
exit status 1

$ identity -pretty -address not-an-address
{
    "ok": false,
    "reason": "The provided vpn addr could not be parsed: not-an-address"
}
exit status 1

$ identity -address 
The provided vpn addr could not be parsed: 
exit status 1

$ identity -json -address 
{"ok":false,"reason":"The provided vpn addr could not be parsed: "}
exit status 1

$ identity -pretty -address 
{
    "ok": false,
    "reason": "The provided vpn addr could not be parsed: "
}
exit status 1

$ identity 10.222.0.9
identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9
exit status 1

$ identity -json 10.222.0.9
{"ok":false,"reason":"identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9"}
exit status 1

$ identity -pretty 10.222.0.9
{
    "ok": false,
    "reason": "identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9"
}
exit status 1

$ print-tunnel
No vpn address was provided
exit status 1

$ print-tunnel -json
{"ok":false,"reason":"No vpn address was provided"}
exit status 1

$ print-tunnel -pretty
{
    "ok": false,
    "reason": "No vpn address was provided"
}
exit status 1

$ print-tunnel 10.222.0.9
Could not find tunnel for vpn addr: 10.222.0.9
exit status 1

$ print-tunnel -json 10.222.0.9
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
exit status 1

$ print-tunnel -pretty 10.222.0.9
{
    "ok": false,
    "reason": "Could not find tunnel for vpn addr: 10.222.0.9"
}
exit status 1

$ print-tunnel 10.222.0.250
Could not find tunnel for vpn addr: 10.222.0.250
exit status 1

$ print-tunnel -json 10.222.0.250
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.250"}
exit status 1

$ print-tunnel -pretty 10.222.0.250
{
    "ok": false,
    "reason": "Could not find tunnel for vpn addr: 10.222.0.250"
}
exit status 1

$ print-relays
{"Relays":null}

$ print-relays -json
{"Relays":null}

$ print-relays -pretty
{
    "Relays": null
}

$ query-lighthouse
No vpn address was provided
exit status 1

$ query-lighthouse -json
{"ok":false,"reason":"No vpn address was provided"}
exit status 1

$ query-lighthouse -pretty
{
    "ok": false,
    "reason": "No vpn address was provided"
}
exit status 1

$ query-lighthouse 10.222.0.9
{}

$ query-lighthouse -json 10.222.0.9
{}

$ query-lighthouse -pretty 10.222.0.9
{}

$ query-lighthouse not-an-address
The provided vpn address could not be parsed: not-an-address
exit status 1

$ query-lighthouse -json not-an-address
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
exit status 1

$ query-lighthouse -pretty not-an-address
{
    "ok": false,
    "reason": "The provided vpn address could not be parsed: not-an-address"
}
exit status 1

$ log-level
Log level is not reconfigurable on this logger
exit status 1

$ log-level -json
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
exit status 1

$ log-level -pretty
{
    "ok": false,
    "reason": "Log level is not reconfigurable on this logger"
}
exit status 1

$ log-level debug
Log level is not reconfigurable on this logger
exit status 1

$ log-level -json debug
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
exit status 1

$ log-level -pretty debug
{
    "ok": false,
    "reason": "Log level is not reconfigurable on this logger"
}
exit status 1

$ log-level bogus
Log level is not reconfigurable on this logger
exit status 1

$ log-level -json bogus
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
exit status 1

$ log-level -pretty bogus
{
    "ok": false,
    "reason": "Log level is not reconfigurable on this logger"
}
exit status 1

$ log-level info
Log level is not reconfigurable on this logger
exit status 1

$ log-level -json info
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
exit status 1

$ log-level -pretty info
{
    "ok": false,
    "reason": "Log level is not reconfigurable on this logger"
}
exit status 1

$ log-format
Log format is not reconfigurable on this logger
exit status 1

$ log-format -json
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
exit status 1

$ log-format -pretty
{
    "ok": false,
    "reason": "Log format is not reconfigurable on this logger"
}
exit status 1

$ log-format json
Log format is not reconfigurable on this logger
exit status 1

$ log-format -json json
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
exit status 1

$ log-format -pretty json
{
    "ok": false,
    "reason": "Log format is not reconfigurable on this logger"
}
exit status 1

$ log-format text
Log format is not reconfigurable on this logger
exit status 1

$ log-format -json text
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
exit status 1

$ log-format -pretty text
{
    "ok": false,
    "reason": "Log format is not reconfigurable on this logger"
}
exit status 1

$ change-remote
No vpn address was provided
exit status 1

$ change-remote -json
{"ok":false,"reason":"No vpn address was provided"}
exit status 1

$ change-remote -pretty
{
    "ok": false,
    "reason": "No vpn address was provided"
}
exit status 1

$ change-remote 10.222.0.9
No address was provided
exit status 1

$ change-remote -json 10.222.0.9
{"ok":false,"reason":"No address was provided"}
exit status 1

$ change-remote -pretty 10.222.0.9
{
    "ok": false,
    "reason": "No address was provided"
}
exit status 1

$ change-remote -address 10.94.0.10:4242 10.222.0.9
Could not find tunnel for vpn address: 10.222.0.9
exit status 1

$ change-remote -json -address 10.94.0.10:4242 10.222.0.9
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.9"}
exit status 1

$ change-remote -pretty -address 10.94.0.10:4242 10.222.0.9
{
    "ok": false,
    "reason": "Could not find tunnel for vpn address: 10.222.0.9"
}
exit status 1

$ change-remote -address 10.94.0.10:4242 10.222.0.250
Could not find tunnel for vpn address: 10.222.0.250
exit status 1

$ change-remote -json -address 10.94.0.10:4242 10.222.0.250
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.250"}
exit status 1

$ change-remote -pretty -address 10.94.0.10:4242 10.222.0.250
{
    "ok": false,
    "reason": "Could not find tunnel for vpn address: 10.222.0.250"
}
exit status 1

$ create-tunnel
No vpn address was provided
exit status 1

$ create-tunnel -json
{"ok":false,"reason":"No vpn address was provided"}
exit status 1

$ create-tunnel -pretty
{
    "ok": false,
    "reason": "No vpn address was provided"
}
exit status 1

$ create-tunnel 10.222.0.9
Tunnel already handshaking
exit status 1

$ create-tunnel -json 10.222.0.9
{"ok":false,"reason":"Tunnel already handshaking"}
exit status 1

$ create-tunnel -pretty 10.222.0.9
{
    "ok": false,
    "reason": "Tunnel already handshaking"
}
exit status 1

$ create-tunnel -address 10.94.0.10:4242 10.222.0.10
Created

$ create-tunnel -json -address 10.94.0.10:4242 10.222.0.10
{"ok":false,"reason":"Tunnel already handshaking"}
exit status 1

$ create-tunnel -pretty -address 10.94.0.10:4242 10.222.0.10
{
    "ok": false,
    "reason": "Tunnel already handshaking"
}
exit status 1

$ create-tunnel not-an-address
The provided vpn address could not be parsed: not-an-address
exit status 1

$ create-tunnel -json not-an-address
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
exit status 1

$ create-tunnel -pretty not-an-address
{
    "ok": false,
    "reason": "The provided vpn address could not be parsed: not-an-address"
}
exit status 1

$ close-tunnel
No vpn address was provided
exit status 1

$ close-tunnel -json
{"ok":false,"reason":"No vpn address was provided"}
exit status 1

$ close-tunnel -pretty
{
    "ok": false,
    "reason": "No vpn address was provided"
}
exit status 1

$ close-tunnel 10.222.0.250
Could not find tunnel for vpn address: 10.222.0.250
exit status 1

$ close-tunnel -json 10.222.0.250
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.250"}
exit status 1

$ close-tunnel -pretty 10.222.0.250
{
    "ok": false,
    "reason": "Could not find tunnel for vpn address: 10.222.0.250"
}
exit status 1

$ close-tunnel not-an-address
The provided vpn address could not be parsed: not-an-address
exit status 1

$ close-tunnel -json not-an-address
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
exit status 1

$ close-tunnel -pretty not-an-address
{
    "ok": false,
    "reason": "The provided vpn address could not be parsed: not-an-address"
}
exit status 1

$ help
Available commands:
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
close-tunnel - Closes a tunnel for the provided vpn addr
create-tunnel - Creates a tunnel for the provided vpn address
device-info - Prints information about the network device.
help - prints available commands or help <command> for specific usage info
identity - Prints the certificate identity of the host owning the provided vpn addr
list-hostmap - List all known previously connected hosts
list-lighthouse-addrmap - List all lighthouse map entries
list-pending-hostmap - List all handshaking hosts
log-format - Gets or sets the current log format
log-level - Gets or sets the current log level
logout - Ends the current session
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
print-relays - Prints json details about all relay info
print-tunnel - Prints json details about a tunnel for the provided vpn addr
query-lighthouse - Query the lighthouses for the provided vpn address
reload - Reloads configuration from disk, same as sending HUP to the process
version - Prints the currently running version of nebula
whoami - Prints the certificate identity of this node


$ help -json
[{"name":"change-remote","short":"Changes the remote address used in the tunnel for the provided vpn addr","flags":[{"name":"address","usage":"The new remote address, ip:port"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"close-tunnel","short":"Closes a tunnel for the provided vpn addr","flags":[{"name":"local-only","bool":true,"default":"false","usage":"Disables notifying the remote that the tunnel is shutting down"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"create-tunnel","short":"Creates a tunnel for the provided vpn address","help":"The lighthouses will be queried for real addresses but you can provide one as well.","flags":[{"name":"address","usage":"Optionally provide a real remote address, ip:port "},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"device-info","short":"Prints information about the network device.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"help","short":"prints available commands or help \u003ccommand\u003e for specific usage info","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"identity","short":"Prints the certificate identity of the host owning the provided vpn addr","help":"Identity is what the certificate says: name, vpn addrs, networks, groups, fingerprint, issuer and validity. The address may carry a port, so a connection's remote address can be passed through as is. For this node's own identity use whoami.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-hostmap","short":"List all known previously connected hosts","flags":[{"name":"by-index","bool":true,"default":"false","usage":"gets all hosts in the hostmap from the index table"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-lighthouse-addrmap","short":"List all lighthouse map entries","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-pending-hostmap","short":"List all handshaking hosts","flags":[{"name":"by-index","bool":true,"default":"false","usage":"gets all hosts in the hostmap from the index table"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"log-format","short":"Gets or sets the current log format","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"log-level","short":"Gets or sets the current log level","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"logout","short":"Ends the current session","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-cert","short":"Prints the current certificate being used or the certificate for the provided vpn addr","help":"The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"raw","bool":true,"default":"false","usage":"prints the PEM encoded certificate; with -json, an object holding it"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-relays","short":"Prints json details about all relay info","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-tunnel","short":"Prints json details about a tunnel for the provided vpn addr","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"query-lighthouse","short":"Query the lighthouses for the provided vpn address","help":"This command is asynchronous. Only currently known udp addresses will be printed.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"reload","short":"Reloads configuration from disk, same as sending HUP to the process","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"version","short":"Prints the currently running version of nebula","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"whoami","short":"Prints the certificate identity of this node","help":"The fields identity prints, read from this node's own certificate.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}]

$ help -pretty
[
    {
        "name": "change-remote",
        "short": "Changes the remote address used in the tunnel for the provided vpn addr",
        "flags": [
            {
                "name": "address",
                "usage": "The new remote address, ip:port"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "close-tunnel",
        "short": "Closes a tunnel for the provided vpn addr",
        "flags": [
            {
                "name": "local-only",
                "bool": true,
                "default": "false",
                "usage": "Disables notifying the remote that the tunnel is shutting down"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "create-tunnel",
        "short": "Creates a tunnel for the provided vpn address",
        "help": "The lighthouses will be queried for real addresses but you can provide one as well.",
        "flags": [
            {
                "name": "address",
                "usage": "Optionally provide a real remote address, ip:port "
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "device-info",
        "short": "Prints information about the network device.",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "help",
        "short": "prints available commands or help \u003ccommand\u003e for specific usage info",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "identity",
        "short": "Prints the certificate identity of the host owning the provided vpn addr",
        "help": "Identity is what the certificate says: name, vpn addrs, networks, groups, fingerprint, issuer and validity. The address may carry a port, so a connection's remote address can be passed through as is. For this node's own identity use whoami.",
        "flags": [
            {
                "name": "address",
                "usage": "The vpn addr to look up, optionally with a port"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "list-hostmap",
        "short": "List all known previously connected hosts",
        "flags": [
            {
                "name": "by-index",
                "bool": true,
                "default": "false",
                "usage": "gets all hosts in the hostmap from the index table"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "list-lighthouse-addrmap",
        "short": "List all lighthouse map entries",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "list-pending-hostmap",
        "short": "List all handshaking hosts",
        "flags": [
            {
                "name": "by-index",
                "bool": true,
                "default": "false",
                "usage": "gets all hosts in the hostmap from the index table"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "log-format",
        "short": "Gets or sets the current log format",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "log-level",
        "short": "Gets or sets the current log level",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "logout",
        "short": "Ends the current session",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "print-cert",
        "short": "Prints the current certificate being used or the certificate for the provided vpn addr",
        "help": "The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.",
        "flags": [
            {
                "name": "address",
                "usage": "The vpn addr to look up, optionally with a port"
            },
            {
                "name": "raw",
                "bool": true,
                "default": "false",
                "usage": "prints the PEM encoded certificate; with -json, an object holding it"
            },
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "print-relays",
        "short": "Prints json details about all relay info",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "print-tunnel",
        "short": "Prints json details about a tunnel for the provided vpn addr",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "query-lighthouse",
        "short": "Query the lighthouses for the provided vpn address",
        "help": "This command is asynchronous. Only currently known udp addresses will be printed.",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "reload",
        "short": "Reloads configuration from disk, same as sending HUP to the process",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "version",
        "short": "Prints the currently running version of nebula",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    },
    {
        "name": "whoami",
        "short": "Prints the certificate identity of this node",
        "help": "The fields identity prints, read from this node's own certificate.",
        "flags": [
            {
                "name": "json",
                "bool": true,
                "default": "false",
                "usage": "outputs as json"
            },
            {
                "name": "pretty",
                "bool": true,
                "default": "false",
                "usage": "pretty prints json, assumes -json"
            }
        ]
    }
]

$ help print-cert
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
  The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.
  -address string
    	The vpn addr to look up, optionally with a port
  -raw
    	prints the PEM encoded certificate; with -json, an object holding it
  -json
    	outputs as json
  -pretty
    	pretty prints json, assumes -json

$ help -json print-cert
{"name":"print-cert","short":"Prints the current certificate being used or the certificate for the provided vpn addr","help":"The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"raw","bool":true,"default":"false","usage":"prints the PEM encoded certificate; with -json, an object holding it"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}

$ help -pretty print-cert
{
    "name": "print-cert",
    "short": "Prints the current certificate being used or the certificate for the provided vpn addr",
    "help": "The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.",
    "flags": [
        {
            "name": "address",
            "usage": "The vpn addr to look up, optionally with a port"
        },
        {
            "name": "raw",
            "bool": true,
            "default": "false",
            "usage": "prints the PEM encoded certificate; with -json, an object holding it"
        },
        {
            "name": "json",
            "bool": true,
            "default": "false",
            "usage": "outputs as json"
        },
        {
            "name": "pretty",
            "bool": true,
            "default": "false",
            "usage": "pretty prints json, assumes -json"
        }
    ]
}

$ help logout
logout - Ends the current session
  -json
    	outputs as json
  -pretty
    	pretty prints json, assumes -json

$ help -json logout
{"name":"logout","short":"Ends the current session","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}

$ help -pretty logout
{
    "name": "logout",
    "short": "Ends the current session",
    "flags": [
        {
            "name": "json",
            "bool": true,
            "default": "false",
            "usage": "outputs as json"
        },
        {
            "name": "pretty",
            "bool": true,
            "default": "false",
            "usage": "pretty prints json, assumes -json"
        }
    ]
}

$ logout -h
logout - Ends the current session
  -json
    	outputs as json
  -pretty
    	pretty prints json, assumes -json

$ logout -json -h
logout - Ends the current session
  -json
    	outputs as json
  -pretty
    	pretty prints json, assumes -json

$ logout -pretty -h
logout - Ends the current session
  -json
    	outputs as json
  -pretty
    	pretty prints json, assumes -json

$ not-a-command 10.222.0.9
did not understand: not-a-command
Available commands:
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
close-tunnel - Closes a tunnel for the provided vpn addr
create-tunnel - Creates a tunnel for the provided vpn address
device-info - Prints information about the network device.
help - prints available commands or help <command> for specific usage info
identity - Prints the certificate identity of the host owning the provided vpn addr
list-hostmap - List all known previously connected hosts
list-lighthouse-addrmap - List all lighthouse map entries
list-pending-hostmap - List all handshaking hosts
log-format - Gets or sets the current log format
log-level - Gets or sets the current log level
logout - Ends the current session
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
print-relays - Prints json details about all relay info
print-tunnel - Prints json details about a tunnel for the provided vpn addr
query-lighthouse - Query the lighthouses for the provided vpn address
reload - Reloads configuration from disk, same as sending HUP to the process
version - Prints the currently running version of nebula
whoami - Prints the certificate identity of this node

exit status 1

$ not-a-command -json 10.222.0.9
did not understand: not-a-command
Available commands:
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
close-tunnel - Closes a tunnel for the provided vpn addr
create-tunnel - Creates a tunnel for the provided vpn address
device-info - Prints information about the network device.
help - prints available commands or help <command> for specific usage info
identity - Prints the certificate identity of the host owning the provided vpn addr
list-hostmap - List all known previously connected hosts
list-lighthouse-addrmap - List all lighthouse map entries
list-pending-hostmap - List all handshaking hosts
log-format - Gets or sets the current log format
log-level - Gets or sets the current log level
logout - Ends the current session
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
print-relays - Prints json details about all relay info
print-tunnel - Prints json details about a tunnel for the provided vpn addr
query-lighthouse - Query the lighthouses for the provided vpn address
reload - Reloads configuration from disk, same as sending HUP to the process
version - Prints the currently running version of nebula
whoami - Prints the certificate identity of this node

exit status 1

$ not-a-command -pretty 10.222.0.9
did not understand: not-a-command
Available commands:
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
close-tunnel - Closes a tunnel for the provided vpn addr
create-tunnel - Creates a tunnel for the provided vpn address
device-info - Prints information about the network device.
help - prints available commands or help <command> for specific usage info
identity - Prints the certificate identity of the host owning the provided vpn addr
list-hostmap - List all known previously connected hosts
list-lighthouse-addrmap - List all lighthouse map entries
list-pending-hostmap - List all handshaking hosts
log-format - Gets or sets the current log format
log-level - Gets or sets the current log level
logout - Ends the current session
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
print-relays - Prints json details about all relay info
print-tunnel - Prints json details about a tunnel for the provided vpn addr
query-lighthouse - Query the lighthouses for the provided vpn address
reload - Reloads configuration from disk, same as sending HUP to the process
version - Prints the currently running version of nebula
whoami - Prints the certificate identity of this node

exit status 1

$ reload
Reloading config
Config reload failed, the new config did not load: no config files found at 
exit status 1

$ reload -json
{"ok":false,"reason":"Config reload failed, the new config did not load: no config files found at "}
exit status 1

$ reload -pretty
{
    "ok": false,
    "reason": "Config reload failed, the new config did not load: no config files found at "
}
exit status 1