KUBERNETES(1)(kubernetes)

💫 KUBERNETES(1)(kubernetes) 💫

okay bestie, welcome to the kubernetes manual section one — we're in the kubernetes manual, and today's episode is kubeadm join phase preflight. yes it's a mouthful. no you're not gonna forget it. let's go 🦋

---

✨ NAME ✨

kubeadm join phase preflight — run join pre-flight checks 👑

---

🌸 SYNOPSIS 🌸

kubeadm join phase preflight [OPTIONS]

---

💖 DESCRIPTION 💖

Run pre-flight checks for kubeadm join. that's it. that's the whole vibe check before the actual join happens — like checking your outfit in the mirror before you leave the house 💅

---

🎀 OPTIONS 🎀

• --apiserver-advertise-address="" — if this node is gonna host a shiny new control plane instance, this is the IP address the API Server will advertise that it's listening on. leave it empty and the default network interface gets used instead ✨
• --apiserver-bind-port=6443 — again, if this node is hosting a new control plane instance, this is the port the API Server binds to. default is 6443, as is tradition 🫶
• --certificate-key="" — use this key to decrypt the certificate secrets that init uploaded. heads up: the certificate key is a hex encoded string that's an AES key of size 32 bytes. no cap, exactly 32 bytes 💀
• --config="" — path to a kubeadm configuration file. yes, the classic. 📄
• --control-plane=false — create a new control plane instance on this node. defaults to false, so it's giving "just a worker" unless you say otherwise 👑
• --cri-socket="" — path to the CRI socket to connect to. if it's empty, kubeadm will try to auto-detect this value for you. only use this option if you've got more than one CRI installed, or if your CRI socket is non-standard. iykyk 🔌
• --discovery-file="" — for file-based discovery, this is a file or URL to load cluster information from. 🌈
• --discovery-token="" — for token-based discovery, the token used to validate cluster information fetched from the API server. 🎟️
• --discovery-token-ca-cert-hash=[] — for token-based discovery, validate that the root CA public key matches this hash. format: ":" ⭐
• --discovery-token-unsafe-skip-ca-verification=false — for token-based discovery, allow joining without --discovery-token-ca-cert-hash pinning. defaults to false. it's literally in the name, bestie — unsafe. 🙈
• --dry-run=false — don't apply any changes, just output what would be done. the "let me rehearse this in my head first" option 🧚
• --ignore-preflight-errors=[] — a list of checks whose errors will be shown as warnings instead. example: 'IsPrivilegedUser,Swap'. value 'all' ignores errors from every single check. 💀
• --node-name="" — specify the node name. that's the whole thing 🌸
• --tls-bootstrap-token="" — specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node. 🎀
• --token="" — use this token for both discovery-token and tls-bootstrap-token when those values aren't provided. one token to rule them all, lowkey convenient 💜

🌟 OPTIONS INHERITED FROM PARENT COMMANDS 🌟

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path. 🌀
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. 👑

---

🔥 EXAMPLE 🔥

  # Run join pre-flight checks using a config file.
  kubeadm join phase preflight --config kubeadm-config.yaml

---

🌈 SEE ALSO 🌈

• kubeadm-join-phase(1),

---

💜 HISTORY 💜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! 😭 iconic honestly

---

and that's a wrap, bestie 🫶 this was the kubernetes manual, KUBERNETES(1)(kubernetes), user section — page authored back in Jan 2015 by Eric Paris, and you just read it fr fr. slay, go join that cluster 💅✨