KUBERNETES(1)(kubernetes)

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, buckle up 💖 this is a page from the kubernetes manual (section 1, the user commands one, iykyk) and we're about to make cert renewal make sense. no cap.

---

🌸 NAME 🌸

kubeadm certs renew admin.conf — bestie, this one renews the certificate that's embedded in the kubeconfig file, the one the admin uses and the one kubeadm itself uses. two birds, one cert, slay 💅

---

🎀 SYNOPSIS 🎀

kubeadm certs renew admin.conf [OPTIONS]

---

🦋 DESCRIPTION 🦋

okay so here's the vibe: this command renews the certificate embedded in the kubeconfig file, for the admin to use and for kubeadm itself. that's it, that's the job. 👑

and listen, renewals run unconditionally — like, it does not care whether your certificate has expired or not. it's renewing regardless. and extra attributes like SANs? those get based on the existing file/certificates, so there is no need to resupply them. you don't have to re-type all that, periodt. ✨

renewal by default tries to use the certificate authority in the local PKI managed by kubeadm. as an alternative, it is possible to use the K8s certificate API for certificate renewal, or, as a last option, to generate a CSR request. three paths, pick your fighter 🫶

⚠️ okay important part, don't scroll past this: after renewal, in order to make changes effective, you have to restart the control-plane components, and eventually re-distribute the renewed certificate in case the file is used elsewhere. like, the cert is new but nobody knows yet, bestie 😭 go tell them.

---

💅 OPTIONS 💅

• --cert-dir="/etc/kubernetes/pki" — the path where to save the certificates 📁
• --config="" — path to a kubeadm configuration file 🗂️
• --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. if the flag is not set, a set of standard locations can be searched for an existing kubeconfig file 🔍

---

🧚 OPTIONS INHERITED FROM PARENT COMMANDS 🧚

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path 🌀
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version ⭐

---

🌈 SEE ALSO 🌈

• kubeadm-certs-renew(1),

---

👑 HISTORY 👑

january 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! 🙈

---

and that's the whole page bestie 💖 this came out of the kubernetes manual, the Manuals / User section, stamped KUBERNETES(1)(kubernetes). go renew that cert and restart your control-plane components, you absolute icon 🎀✨🦋