kumactl generate dataplane-token

Generate Dataplane Token


Generate Dataplane Token that is used to prove Dataplane identity.

kumactl generate dataplane-token [flags]


Generate token bound by name and mesh
$ kumactl generate dataplane-token --mesh demo --name demo-01 --valid-for 24h

Generate token bound by mesh
$ kumactl generate dataplane-token --mesh demo --valid-for 24h

Generate Ingress token
$ kumactl generate dataplane-token --type ingress --valid-for 24h

Generate token bound by tag
$ kumactl generate dataplane-token --mesh demo --tag kuma.io/service=web,web-api --valid-for 24h


  -h, --help                      help for dataplane-token
      --kid string                ID of the key that is used to issue a token. Required when --signing-key-path is used.
  -m, --mesh string               mesh to use (default "default")
      --name string               name of the Dataplane
      --proxy-type string         type of the Dataplane ("dataplane", "ingress")
      --signing-key-path string   path to a file that contains private signing key. When specified, control plane won't be used to issue the token.
      --tag stringToString        required tag values for dataplane (split values by comma to provide multiple values) (default [])
      --valid-for duration        how long the token will be valid (for example "24h")

Options inherited from parent commands

      --api-timeout duration   the timeout for api calls. It includes connection time, any redirects, and reading the response body. A timeout of zero means no timeout (default 1m0s)
      --config-file string     path to the configuration file to use
      --log-level string       log level: one of off|info|debug (default "off")
      --no-config              if set no config file and config directory will be created


Last Updated: 4/14/2023, 18:05:05 PM