Find instructions on how to perform common tasks using the Tanzu Service Mesh CLI. What to read next Install the CLIThe Tanzu Service Mesh CLI is integrated with the VMware Tanzu command-line interface (Tanzu CLI) as a plugin. You use the Tanzu Service Mesh plugin to perform the Tanzu Service Mesh CLI commands from the Tanzu CLI. Log in to the Tanzu Service Mesh CLITo start using the Tanzu Service Mesh CLI, you must log in to the SaaS endpoint on which you want to perform actions. Get a List of CLI Commands and Get Help on a CommandYou can get a list of the commands in the Tanzu Service Mesh CLI and get Help on a specific command. Create a Declarative Manifest Based on a Tanzu Service Mesh API SpecificationYou can run a CLI command to retrieve the corresponding API specification from Tanzu Service Mesh SaaS. Based on the API specification, you can describe a configuration that creates a Tanzu Service Mesh object, such as a global namespace, or a policy, such as an access control policy, in a declarative manifest file. Use an Existing Object or Policy Configuration to Create a ManifestUsing the Tanzu Service Mesh CLI, you can retrieve the configuration of an existing object or a policy and create another manifest based on the existing configuration. Apply a Configuration to Tanzu Service Mesh SaaS Using the CLIUsing the Tanzu Service Mesh CLI, you can apply the configuration from a declarative manifest file to your Tanzu Service Mesh tenant. After the configuration is applied, a defined object, such as a global namespace, or a defined policy, such as an access control policy, is created or updated on the clusters that match the selection criteria in the configuration. Onboard a Cluster Using the CLIIn addition to onboarding a cluster from the Tanzu Service Mesh UI and through the API, you can onboard a cluster using the Tanzu CLI. Onboarding involves registering a cluster with Tanzu Service Mesh and installing the necessary software components on the cluster. Remove a Cluster from Tanzu Service Mesh Using the CLIRemoving a cluster from Tanzu Service Mesh involves unregistering the cluster with its Tanzu Service Mesh SaaS server and uninstalling the Tanzu Service Mesh software components on the cluster. You can remove a cluster from Tanzu Service Mesh using the Tanzu Service Mesh CLI. Create a Global NamespaceTo create a global namespace with the Tanzu Service Mesh CLI, you must describe the configuration of the global namespace in a YAML file and then apply the configuration file. Create an Access Control PolicyUsing the Tanzu Service Mesh CLI, you can retrieve all the API specifications that make up an access control policy configuration from Tanzu Service Mesh SaaS. You can combine these specifications in a declarative manifest file to describe a complete access control policy configuration. Create a Public Service Using the CLIYou create a public service with the Tanzu CLI by describing its configuration in a YAML file and then applying the configuration file. Add a Certificate to Tanzu Service Mesh Using the CLIUsing the Tanzu Service Mesh CLI, you can add transport layer security (TLS) certificates to Tanzu Service Mesh for use in different situations where secure, TLS-encrypted connections are needed. Create an AWS Integration Account Using the CLIUsing the Tanzu Service Mesh CLI, you can create an account to integrate with Amazon Route 53 in Amazon Web Services (AWS). An AWS integration account adds DNS and global server load balancing (GSLB) functionality to Tanzu Service Mesh. Create a DNS Account Using the CLIUsing the Tanzu Service Mesh CLI, you can create a Domain Name System (DNS) account based on an external DNS service, such as Amazon Route 53, to enable DNS functionality in Tanzu Service Mesh. Debug Problems with a Manifest FileIf a declarative manifest file is not applied because of an error, you can rerun the manifest application CLI command with a debugging option to see the error in the output, correct the error, and then re-apply the manifest. Delete an Object or a Policy from Tanzu Service Mesh SaaS Using the CLIUsing the Tanzu Service Mesh CLI, you can remove an object, such as a global namespace, or a policy, such as an access control policy, from the configuration in your Tanzu Service Mesh tenant. Parent topic: Tanzu Service Mesh CLI