KUBERNETES(1)(kubernetes)

💖 KUBERNETES(1) — the kubernetes manual, section 1 💖

okay bestie, sit down, hydrate, and let's talk about kubeadm certs renew apiserver-etcd-client because this lil command is doing so much for your cluster's trust issues 🫶

---

✨ NAME ✨

kubeadm certs renew apiserver-etcd-client — it renews the certificate that the apiserver uses to talk to etcd, no cap 🔐

---

✨ SYNOPSIS ✨

kubeadm certs renew apiserver-etcd-client [OPTIONS]

---

✨ DESCRIPTION ✨

So basically: this renews the certificate the apiserver uses to access etcd. That's the whole vibe. 💅

And here's the tea — renewals run unconditionally, like, regardless of the certificate expiration date. Not expired? Doesn't matter, it's getting renewed anyway. Extra attributes like SANs will be based on the existing file/certificates, so you do not need to resupply them. She already knows her own lore. 😌

By default, renewal tries to use the certificate authority in the local PKI managed by kubeadm. As an alternative, you can use the K8s certificate API for certificate renewal — or, as a last option, generate a CSR request. Three paths, pick your fighter. ✨

🚨 ok but listen: after renewal, to make the changes effective you have to restart the control-plane components, and eventually re-distribute the renewed certificate in case the file is used elsewhere. Do not skip this part, I am begging 🙈

---

✨ OPTIONS ✨

• --cert-dir="/etc/kubernetes/pki" — where the certificates get saved 🎀
• --config="" — path to a kubeadm configuration file 📄
• --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. If the flag isn't set, a set of standard locations can be searched for an existing kubeconfig file 🔍

---

✨ OPTIONS INHERITED FROM PARENT COMMANDS ✨

• --rootfs="" — the path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path 🌀
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version 📌

---

✨ SEE ALSO ✨

• kubeadm-certs-renew(1),

---

✨ HISTORY ✨

January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! 📜

---

and that's the whole page, bestie!! this one lives in the kubernetes manual, section 1, and it's marked as Manuals / User — dated way back in January 2015, authored by Eric Paris, and it's giving "kubeadm is so old money" energy 👑 you're welcome, go restart those control-plane components, slay, periodt 💖✨🎀🦋