observe
¶Read-only query verbs — status, check-environment, profiles, logs.
These verbs inspect shield state without mutating any ruleset. status
takes an optional container (bare = config overview, with = live firewall
state); logs supports an optional --container filter and is
dispatched by the CLI's own aggregated-mode handler
(_cmd_logs_cli).
STATUS = CommandDef(name='status', help='Show shield configuration overview', handler=_handle_status, args=(ArgDef(name='container', nargs='?', help='Container name — prints firewall state (up/down/disengaged/offline/error)'),))
module-attribute
¶CHECK_ENVIRONMENT = CommandDef(name='check-environment', help='Check podman environment for compatibility issues', handler=_handle_check_environment)
module-attribute
¶PROFILES = CommandDef(name='profiles', help='List available shield profiles', handler=_handle_profiles)
module-attribute
¶LOGS = CommandDef(name='logs', help='Show audit log entries', handler=_handle_logs, extras=NEEDS_CTR, args=(ArgDef(name='--container', default=None, help='Filter by container name'), ArgDef(name='-n', type=int, default=50, help='Number of recent entries')))
module-attribute
¶