spin trust

What this machine trusts of an installation

Usage:
  spin trust [flags]
  spin trust [command]

Available Commands:
  egress-root Pin the installation's egress root this machine names in a workspace's word

Flags:
  -h, --help   help for trust

Global Flags:
      --config string    config file (default is $HOME/.spin/config.yaml)
  -o, --output string    text for a person, or json: one document of what the API answered, and no prose (default "text")
      --profile string   named profile to use; SPIN_PROFILE names it when this flag does not (default "default")

Use "spin trust [command] --help" for more information about a command.

spin trust egress-root

A workspace's guest trusts its host's egress proxy only by the root its owner's word names,
and this machine names only the root it pinned for the installation: the first one the control
plane offered. Pin another - the installation's root was changed - by the SHA-256 that
'spin-controlplane egress-root' prints on the control plane's machine. Colons and capitals, as
openssl prints a fingerprint, are taken.

A workspace's word names the new root once signed again: 'spin workspace approve-egress-root'.

Usage:
  spin trust egress-root <sha256> [flags]

Flags:
  -h, --help   help for egress-root

Global Flags:
      --config string    config file (default is $HOME/.spin/config.yaml)
  -o, --output string    text for a person, or json: one document of what the API answered, and no prose (default "text")
      --profile string   named profile to use; SPIN_PROFILE names it when this flag does not (default "default")