--parent-kubeconfig string Path of the kubeconfig file of the parent cluster.
INDICATEURS FACULTATIFS
--cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.
--output-file string Output path to store the signed certificate. If unspecified, the default is "CLUSTER_NAME-signed-cert.crt".
--skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.
OPTIONS GCLOUD GÉNÉRALES
Ces options sont disponibles pour toutes les commandes : --configuration, --format, --help, --project, --quiet.
Sauf indication contraire, le contenu de cette page est régi par une licence Creative Commons Attribution 4.0, et les échantillons de code sont régis par une licence Apache 2.0. Pour en savoir plus, consultez les Règles du site Google Developers. Java est une marque déposée d'Oracle et/ou de ses sociétés affiliées.
Dernière mise à jour le 2025/09/04 (UTC).
[[["Facile à comprendre","easyToUnderstand","thumb-up"],["J'ai pu résoudre mon problème","solvedMyProblem","thumb-up"],["Autre","otherUp","thumb-up"]],[["Difficile à comprendre","hardToUnderstand","thumb-down"],["Informations ou exemple de code incorrects","incorrectInformationOrSampleCode","thumb-down"],["Il n'y a pas l'information/les exemples dont j'ai besoin","missingTheInformationSamplesINeed","thumb-down"],["Problème de traduction","translationIssue","thumb-down"],["Autre","otherDown","thumb-down"]],["Dernière mise à jour le 2025/09/04 (UTC)."],[[["\u003cp\u003eThe \u003ccode\u003egdcloud clusters root-access setup-yubikey\u003c/code\u003e command configures a YubiKey for root access to a specified cluster.\u003c/p\u003e\n"],["\u003cp\u003eA parent cluster's kubeconfig file is required for this YubiKey setup process.\u003c/p\u003e\n"],["\u003cp\u003eYou can specify a cluster name or be prompted to select one from the list of available clusters.\u003c/p\u003e\n"],["\u003cp\u003eThe output path for the signed certificate can be customized, otherwise it defaults to "CLUSTER_NAME-signed-cert.crt".\u003c/p\u003e\n"],["\u003cp\u003eAn optional YubiKey attestation check can be skipped by using the \u003ccode\u003e--skip-attestation-check\u003c/code\u003e flag.\u003c/p\u003e\n"]]],[],null,["# gdcloud clusters root-access setup-yubikey\n\nNAME\n----\n\ngdcloud clusters root-access setup-yubikey - Set up a YubiKey with the root access of a cluster.\n\nSYNOPSIS\n--------\n\n gdcloud clusters root-access setup-yubikey [flags]\n\n### REQUIRED FLAGS\n\n --parent-kubeconfig string Path of the kubeconfig file of the parent cluster.\n\n### OPTIONAL FLAGS\n\n --cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.\n --output-file string Output path to store the signed certificate. If unspecified, the default is \"CLUSTER_NAME-signed-cert.crt\".\n --skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.\n\n### GDCLOUD WIDE FLAGS\n\nThese flags are available to all commands: `--configuration`, `--format`, `--help`, `--project`, `--quiet`.\n\nFor more information, see the [gdcloud CLI reference overview](/distributed-cloud/hosted/docs/latest/gdch/resources/gdcloud-reference/gdcloud) page."]]
