Sign in
Settings

Mint a short-lived, single-use node enrollment token.

post/settings/enrollment-tokens

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/settings/enrollment-tokens
  • Auth: HTTP bearer

Request body

bound_node_namestring nullable

Optional: restrict the token to register one specific node name.

max_usesinteger nullable

Maximum registrations this token may authorize (default 1).

ttl_secsinteger nullable

Time-to-live in seconds (default 3600 = 1h).

Response

Enrollment token minted

ca_fingerprintstring nullable

SHA-256 fingerprint of the cluster CA. Token issuance initializes the CA when needed, so every newly minted token carries a trust pin.

expires_atstring required
idinteger required
max_usesinteger required
messagestring required
tokenstring required

The plaintext enrollment token — shown only once, save it now.

Changes

No recorded changes to this operation across all 50 revisions of this API.