kubeadm join
kubeadm join <host>:6443 --token <token> --discovery-token-ca-cert-hash sha256:<hash>
Risk: Careful
What it does
Brings a new machine into the cluster as a stall, with a ticket and the office's ID check.
When to use it
On each new worker, after kubeadm init. Real machines only, not the practice terminal.
Example
$ sudo kubeadm join 172.18.0.2:6443 --token abcdef.0123456789abcdef --discovery-token-ca-cert-hash sha256:<hash>Join the food court at the office's front counter.
$ kubeadm token create --print-join-commandOn the office machine: print a fresh join command. Tokens last 24 hours by default.
Learn it in: kubeadm: how a cluster is born · Official docs