kes update

Overview

Update the KES binary to a different version.

Syntax

kes update                      \
        [--arch <string>]       \
        [--downgrade, -d]       \
        [--insecure, -k]        \
        [--minisign-key <key>]  \
        [--os <string>]         \
        [--output, -o <path>]   \
        [<version>]

Parameters

--arch

Download the binary for the specified system architecture.

Valid architectures:

  • amd64

  • arm64

  • ppc64le

    Valid only for the Linux operating system.

  • s390x

    Valid only for the Linux operating system.

--downgrade, -d

Allow the new binary to be a previous version.

--insecure, -k

Optional

Directs the command to skip x.509 certificate validation during the TLS handshake with the KES server. This allows connections to KES servers using untrusted certificates (i.e. self-signed or issued by an unknown Certificate Authority).

MinIO strongly recommends against using this option in production environments.

--minisign-key

Verify the downloaded binary with the specified minisign public key.

--os

Download the binary for the specified operating system.

Valid operating systems:

  • darwin

    Use for macOS.

  • linux

  • windows

--output, -o

Save the new binary to the specified file path instead of replacing the current KES binary.

Examples

Download the latest binary and replace the current one:

kes update

Download a specific binary version and replace the current one:

kes update v0.21.0

Download an older binary version and replace the current one:

kes update --downgrade v.0.19.0

Download the latest binary for macOS on an arm64 chip like the M2 and save it to a file, keeping the current binary in place:

kes update -o ./kes-darwin-arm64 --os darwin --arch arm64