`maqpna taint clear`

Clear taint labels from a session, with a reason that is audited

Govern-o json | yaml

Synopsis#

maqpna taint clear SESSION --reason TEXT [--label L]... [--actor NAME] [--gateway URL] [-n NS]

Flag	Type	Description	Default
`--actor`	string	who clears it (recorded with the reason)	`$USER`
`--gateway`	string	gateway base URL (env MAQPNA_GATEWAY_URL; default: the context's gateway)	none
`--label`	string	label to clear (repeatable; default all)	none
`-n`, `--namespace`	string	namespace (default: the context's namespace)	none
`--oidc-token-file`	string	file holding an OIDC access token for the admin API (env MAQPNA_OIDC_TOKEN_FILE); wins over `--token`	none
`--reason`	string	why the label is cleared (recorded in the audit ledger; required)	none
`--token`	string	static admin token (env MAQPNA_ADMIN_TOKEN; dev/break-glass)	none

The global flags (--context, -o, --no-color, ...) work with every command.

$ maqpna taint clear fix-test-7k2 -n team-a --reason "reviewed the fetched page"

Talks to the gateway: --gateway, else MAQPNA_GATEWAY_URL, else the current context's gateway (maqpna context).
Authenticates to the admin API with the token stored by maqpna login, --oidc-token-file, or a static --token (MAQPNA_ADMIN_TOKEN).
Prints a table by default; -o json or -o yaml print the data, and --jq EXPR filters the JSON.

Code	Meaning
`0`	success
`1`	error (the message says what failed, with a hint when there is one)
`2`	usage error: unknown flag, missing argument or bad value; the synopsis is printed
`3`	a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command)

maqpna taint clear.cast