KUBERNETES(1)(kubernetes)

📦
version 1.37.2 · 3 versions
, in arch rolling, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie so this is a page from the kubernetes manual, originally written by Eric Paris back in Jan 2015 💖 and it's about a lil kubeadm subcommand that does one very specific thing. let's get into it 🫶

🌸 NAME 🌸

kubeadm certs renew apiserver-kubelet-client — renews the certificate that lets the API server talk to kubelet 🔐✨

🎀 SYNOPSIS 🎀

kubeadm certs renew apiserver-kubelet-client [OPTIONS]

🦋 DESCRIPTION 🦋

so basically, this command renews the certificate for the API server to connect to kubelet. that's the whole vibe 💅

here's the tea tho — renewals run unconditionally, meaning it does NOT care whether your certificate is expired or not. it just goes. and extra attributes like SANs</>? those get pulled from the existing file/certificates, so you literally do not need to resupply them. no cap 🙌

by default, renewal tries to use the certificate authority in the local PKI managed by kubeadm. as an alternative, it's possible to use the K8s certificate API for certificate renewal — or, as a last option, to generate a CSR request. options on options, we love a flexible queen 👑

⚠️ after renewal, to make the changes actually effective, you have to restart the control-plane components — and possibly re-distribute the renewed certificate if the file is used somewhere else too. don't skip this part fr fr 😭

💅 OPTIONS 💅

  • --cert-dir="/etc/kubernetes/pki" — the path where the certificates get saved 💾
  • --config="" — path to a kubeadm configuration file.
  • --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. if this flag isn't set, a set of standard locations can be searched for an existing kubeconfig file 🔍

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

  • --rootfs="" — the path to the 'real' host root filesystem. this makes kubeadm chroot into the path you gave it. mind the chroot bestie 🌀
  • --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version ⭐

🌈 SEE ALSO 🌈

📜 HISTORY 📜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 😌✨

and that's the whole page bestie 🎀 this one lives under the Manuals section in the User manual, and it's from KUBERNETES(1)(kubernetes) 💖 mwah, go restart those control-plane components 💋🦋

📦 where this page comes from