--account string the AWS account the plane is meant to build into; refused if the credentials belong elsewhere
--allow-unsealed proceed without a record store, so credentials are NOT sealed
--artifact-key-provider string key sealed artifacts are protected by (env: KUBOX_ARTIFACT_KEY_PROVIDER)
--database-url string record store connection string (env: KUBOX_DATABASE_URL, KUBOX_ARTIFACT_DSN)
-f, --file string the PlaneDeployment to build
-h, --help help for create
--plan render the transaction this would perform, and perform none of it
--preflight-only run the plan and the preflight checks, then stop; builds nothing
--restore-registrations plane delete an export from plane delete or `plane rebuild`: every CloudAccount, External ID, cluster record and agent credential, written back before the operator starts
--skip-install kubox admin install build the cluster and stop, leaving the plane to kubox admin install
--skip-preflight build without proving the prerequisites first, for credentials that cannot read them; the build then finds out for itself
--stack-key-provider string key Pulumi state is encrypted with; must be a DIFFERENT key (env: KUBOX_STACK_KEY_PROVIDER)
--state-backend string Pulumi state backend (env: PULUMI_BACKEND_URL)
--tenant stringArray a tenant this plane builds for: the cloud connection's namespace (kubox-system for Kubox's own); repeatable. Read from the plane's cloud connections when not given
--write-cluster-document string where to write the compiled cluster document (default: beside the deployment)