--parent-kubeconfig string Path of the kubeconfig file of the parent cluster.
OPTIONAL FLAGS
--cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.
--output-file string Output path to store the signed certificate. If unspecified, the default is "CLUSTER_NAME-signed-cert.crt".
--skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.
GDCLOUD WIDE FLAGS
These flags are available to all commands: --configuration, --format, --help, --project, --quiet.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThe \u003ccode\u003egdcloud clusters root-access setup-yubikey\u003c/code\u003e command configures a YubiKey for root access to a specified cluster.\u003c/p\u003e\n"],["\u003cp\u003eA parent cluster's kubeconfig file is required for this YubiKey setup process.\u003c/p\u003e\n"],["\u003cp\u003eYou can specify a cluster name or be prompted to select one from the list of available clusters.\u003c/p\u003e\n"],["\u003cp\u003eThe output path for the signed certificate can be customized, otherwise it defaults to "CLUSTER_NAME-signed-cert.crt".\u003c/p\u003e\n"],["\u003cp\u003eAn optional YubiKey attestation check can be skipped by using the \u003ccode\u003e--skip-attestation-check\u003c/code\u003e flag.\u003c/p\u003e\n"]]],[],null,["# gdcloud clusters root-access setup-yubikey\n\nNAME\n----\n\ngdcloud clusters root-access setup-yubikey - Set up a YubiKey with the root access of a cluster.\n\nSYNOPSIS\n--------\n\n gdcloud clusters root-access setup-yubikey [flags]\n\n### REQUIRED FLAGS\n\n --parent-kubeconfig string Path of the kubeconfig file of the parent cluster.\n\n### OPTIONAL FLAGS\n\n --cluster string Name of the cluster for which the YubiKey root access setup is needed. If unspecified, prompts to select a cluster from the list of available clusters.\n --output-file string Output path to store the signed certificate. If unspecified, the default is \"CLUSTER_NAME-signed-cert.crt\".\n --skip-attestation-check If set, skip the YubiKey attestation check. The default is to perform the attestation check.\n\n### GDCLOUD WIDE FLAGS\n\nThese flags are available to all commands: `--configuration`, `--format`, `--help`, `--project`, `--quiet`.\n\nFor more information, see the [gdcloud CLI reference overview](/distributed-cloud/hosted/docs/latest/gdch/resources/gdcloud-reference/gdcloud) page."]]
