KUBERNETES(1)(kubernetes)

💖 NAME 💖

okay so bestie, welcome to the kubernetes(1) manual page for kubeadm join phase control-plane-prepare kubeconfig — yes that's a mouthful, yes it's iconic, and yes it does exactly one job:

Generate the kubeconfig for the new control plane components ✨

---

🌸 SYNOPSIS 🌸

kubeadm join phase control-plane-prepare kubeconfig [OPTIONS]

---

🦋 DESCRIPTION 🦋

Generate the kubeconfig for the new control plane components.

That's the whole vibe, fr fr. It's one phase, it does one thing, and it does it well. Slay. 💅

---

🎀 OPTIONS 🎀

• --certificate-key="" — use this key to decrypt the certificate secrets that init uploaded. Heads up: this key is a hex encoded string that's an AES key of size 32 bytes. No cap, exactly 32 bytes.
• --config="" — path to a kubeadm configuration file. Just a path, nothing spicy.
• --control-plane=false — create a new control plane instance on this node. Default is false, so you're opting in, bestie.
• --discovery-file="" — for file-based discovery: a file or a URL from which to load cluster information.
• --discovery-token="" — for token-based discovery: the token used to validate cluster information fetched from the API server.
• --discovery-token-ca-cert-hash=[] — for token-based discovery: validate that the root CA public key matches this hash. The format is ":". Yes, that's the format listed, take it up with the manpage. 🙈
• --discovery-token-unsafe-skip-ca-verification=false — for token-based discovery, this lets you join without --discovery-token-ca-cert-hash pinning. The flag literally has "unsafe" in the name, so… read the room. 💀
• --dry-run=false — don't apply any changes, just output what would be done. Perfect for the "let me see the fit before I buy it" moment.
• --tls-bootstrap-token="" — specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node.
• --token="" — use this token for both discovery-token and tls-bootstrap-token when those values aren't provided. One token, two jobs, main character energy. 👑

---

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

• --rootfs="" — the path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path. Lowkey powerful, highkey real.
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version.

---

🫶 SEE ALSO 🫶

• kubeadm-join-phase-control-plane-prepare(1),

---

⭐ HISTORY ⭐

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! 😭 honestly relatable.

---

and that's the whole page, bestie 💜 this one lives in the Manuals section, User subsection, filed under KUBERNETES(1)(kubernetes), dated Jan 2015 — go forth and generate those kubeconfigs, you've got this ✨🦋💅