kubeone-proxy(1)

kubeone-proxy1

Proxy to the kube-apiserver using ssh tunnel

Usage

kubeone proxy [flags]

Overview

HTTPS Proxy (CONNECT method) SSH tunnel.

This command helps to reach kubeapi endpoint with local kubectl in case when private/firewalled endpoint is used (e.g. internal loadbalancer). It creates SSH tunnel to one of the control-plane nodes and then proxies incoming requests through it.

Options

-h, --help[=false]
help for proxy

--listen="127.0.0.1:8888"
SSH tunnel HTTP proxy bind address

Options inherited from parent commands

-c, --credentials=""
File to source credentials and secrets from

-d, --debug[=false]
debug output with stacktrace

-l, --log-format="text"
format for logging

-m, --manifest="./kubeone.yaml"
Path to the KubeOne config

-t, --tfjson=""
Source for terraform output in JSON - to read from stdin. If path is a file, contents will be used. If path is a dictionary, terraform output -json is executed in this path

-v, --verbose[=false]
verbose output

Examples

kubeone proxy -m mycluster.yaml -t terraformoutput.json

History

8-Feb-2026 Auto generated by spf13/cobra

From kubeone 1.12.3-3 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.