--parent-kubeconfig string Path of the kubeconfig file of the parent cluster.
INDICATEURS FACULTATIFS
--cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.
--output-file string Output path to store the signed certificate. If unspecified, the default is "CLUSTER_NAME-signed-cert.crt".
--skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.
OPTIONS GCLOUD GÉNÉRALES
Ces options sont disponibles pour toutes les commandes : --configuration, --format, --help, --project, --quiet.
Sauf indication contraire, le contenu de cette page est régi par une licence Creative Commons Attribution 4.0, et les échantillons de code sont régis par une licence Apache 2.0. Pour en savoir plus, consultez les Règles du site Google Developers. Java est une marque déposée d'Oracle et/ou de ses sociétés affiliées.
Dernière mise à jour le 2025/09/04 (UTC).
[[["Facile à comprendre","easyToUnderstand","thumb-up"],["J'ai pu résoudre mon problème","solvedMyProblem","thumb-up"],["Autre","otherUp","thumb-up"]],[["Difficile à comprendre","hardToUnderstand","thumb-down"],["Informations ou exemple de code incorrects","incorrectInformationOrSampleCode","thumb-down"],["Il n'y a pas l'information/les exemples dont j'ai besoin","missingTheInformationSamplesINeed","thumb-down"],["Problème de traduction","translationIssue","thumb-down"],["Autre","otherDown","thumb-down"]],["Dernière mise à jour le 2025/09/04 (UTC)."],[[["\u003cp\u003eThis command \u003ccode\u003egdcloud clusters root-access setup-yubikey\u003c/code\u003e configures a YubiKey for root access to a specified or selected cluster.\u003c/p\u003e\n"],["\u003cp\u003eIt requires the path to the parent cluster's kubeconfig file using the \u003ccode\u003e--parent-kubeconfig\u003c/code\u003e flag.\u003c/p\u003e\n"],["\u003cp\u003eYou can optionally specify the target cluster with the \u003ccode\u003e--cluster\u003c/code\u003e flag, or you will be prompted to choose one.\u003c/p\u003e\n"],["\u003cp\u003eThe command can output the signed certificate to a custom location using \u003ccode\u003e--output-file\u003c/code\u003e, otherwise it defaults to "CLUSTER_NAME-signed-cert.crt".\u003c/p\u003e\n"],["\u003cp\u003eThe YubiKey attestation check is performed by default, but can be skipped with the \u003ccode\u003e--skip-attestation-check\u003c/code\u003e flag.\u003c/p\u003e\n"]]],[],null,["# gdcloud clusters root-access setup-yubikey\n\nNAME\n----\n\ngdcloud clusters root-access setup-yubikey - Set up a YubiKey with the root access of a cluster.\n\nSYNOPSIS\n--------\n\n gdcloud clusters root-access setup-yubikey [flags]\n\n### REQUIRED FLAGS\n\n --parent-kubeconfig string Path of the kubeconfig file of the parent cluster.\n\n### OPTIONAL FLAGS\n\n --cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.\n --output-file string Output path to store the signed certificate. If unspecified, the default is \"CLUSTER_NAME-signed-cert.crt\".\n --skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.\n\n### GDCLOUD WIDE FLAGS\n\nThese flags are available to all commands: `--configuration`, `--format`, `--help`, `--project`, `--quiet`.\n\nFor more information, see the [gdcloud CLI reference overview](/distributed-cloud/hosted/docs/latest/appliance/resources/gdcloud-reference/gdcloud) page."]]
