KubeOne(1)

📦 version 1.12.3, in arch rolling

💅 KubeOne(1) — kubeone-proxy 🌈

okay bestie, welcome to the KubeOne manual, specifically the kubeone-proxy page — this is the one you're gonna want bookmarked, fr fr 🫶

✨ NAME ✨

kubeone-proxy — a proxy to the kube-apiserver using an SSH tunnel 🦋

✨ SYNOPSIS ✨

kubeone proxy [flags]

✨ DESCRIPTION ✨

So it's an HTTPS Proxy (CONNECT method) SSH tunnel. Iconic. 👑

Here's the vibe: this command helps you reach the kubeapi endpoint with your local kubectl when you're dealing with a private/firewalled endpoint — like, say, an internal loadbalancer. It creates an SSH tunnel to one of the control-plane nodes and then proxies incoming requests through it. no cap, that's the whole flex 💪

✨ OPTIONS ✨

  • -h, --help[=false] — help for proxy 🎀
  • --listen="127.0.0.1:8888" — SSH tunnel HTTP proxy bind address (yep, that's the default, it's giving 127.0.0.1:8888 🌸)

✨ OPTIONS INHERITED FROM PARENT COMMANDS ✨

these ones you get from the parent command, so they're lowkey everywhere 📍

  • -c, --credentials="" — file to source credentials and secrets from 🔐
  • -d, --debug[=false] — debug output with stacktrace (when you really need to see what went down 😭)
  • -l, --log-format="text" — format for logging
  • -m, --manifest="./kubeone.yaml" — path to the KubeOne config
  • -t, --tfjson="" — source for terraform output in JSON — to read from stdin. If path is a file, contents will be used. If path is a dictionary, terraform output -json is executed in this path 🧚
  • -v, --verbose[=false] — verbose output (the yapper option, we love her 💜)

✨ EXAMPLE ✨

like this, bestie:

kubeone proxy -m mycluster.yaml -t terraformoutput.json

✨ SEE ALSO ✨

kubeone(1) — the main character 👑

✨ HISTORY ✨

8-Feb-2026 — auto generated by spf13/cobra ⭐

aaaaand that's the page 🎉 auto generated by spf13/cobra, dated Feb 2026, and it's KubeOne(1) content through and through — go forth and tunnel, you got this 💖🔥

📦 where this page comes from