Edit This Page

kubeadm token

Bootstrap tokens are used for establishing bidirectional trust between a node joining the cluster and a control-plane node, as described in authenticating with bootstrap tokens.

kubeadm init creates an initial token with a 24-hour TTL. The following commands allow you to manage such a token and also to create and manage new ones.

• kubeadm token create
• kubeadm token delete
• kubeadm token generate
• kubeadm token list
• What's next

kubeadm token create

Create bootstrap tokens on the server.

Synopsis

This command will create a bootstrap token for you. You can specify the usages for this token, the “time to live” and an optional human friendly description.

The [token] is the actual token to write. This should be a securely generated random token of the form “[a-z0-9]{6}.[a-z0-9]{16}“. If no [token] is given, kubeadm will generate a random token instead.

kubeadm token create [token]

Options

Options inherited from parent commands

kubeadm token delete

Delete bootstrap tokens on the server.

Synopsis

This command will delete a given bootstrap token for you.

The [token-value] is the full Token of the form “[a-z0-9]{6}.[a-z0-9]{16}” or the Token ID of the form “[a-z0-9]{6}” to delete.

kubeadm token delete [token-value]

Options

Options inherited from parent commands

kubeadm token generate

Generate and print a bootstrap token, but do not create it on the server.

Synopsis

This command will print out a randomly-generated bootstrap token that can be used with the “init” and “join” commands.

You don’t have to use this command in order to generate a token. You can do so yourself as long as it is in the format “[a-z0-9]{6}.[a-z0-9]{16}“. This command is provided for convenience to generate tokens in the given format.

You can also use “kubeadm init” without specifying a token and it will generate and print one for you.

kubeadm token generate [flags]

Options

Options inherited from parent commands

kubeadm token list

List bootstrap tokens on the server.

Synopsis

This command will list all bootstrap tokens for you.

kubeadm token list [flags]

Options

Options inherited from parent commands

What's next

• kubeadm join to bootstrap a Kubernetes worker node and join it to the cluster

Feedback

Was this page helpful?

Thanks for the feedback. If you have a specific, answerable question about how to use Kubernetes, ask it on Stack Overflow. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.