KUBERNETES(1)(kubernetes)

📦
version 1.37.2 · 3 versions
, in arch rolling, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, welcome to the kubernetes manual, section 1, and this page is literally about one of the most important little commands you'll ever run. it was put together by Eric Paris way back in Jan 2015, and it's still serving looks (and certs) to this day. 🎀

🌸 NAME 🌸

kubeadm certs renew apiserver — renews the certificate that serves the Kubernetes API. it's giving "your API server's glow-up appointment." 💅

🦋 SYNOPSIS 🦋

kubeadm certs renew apiserver [OPTIONS]

💖 DESCRIPTION 💖

So what does it actually do? It renews the certificate for serving the Kubernetes API. that's it, that's the job. 👑

Renewals run unconditionally, no matter what the certificate expiration date says. like, it does not care. expired? not expired? doesn't matter, it's renewing. and extra attributes like SANs will be based on the existing file/certificates, so there's literally no need to resupply them. the old files know what they are, periodt. ✨

By default, renewal tries to use the certificate authority in the local PKI managed by kubeadm. as an alternative, it's possible to use the K8s certificate API for certificate renewal, or — as a last option — to generate a CSR request. three paths, all valid, pick your fighter. 🫶

After renewal, to make the changes effective, you have to restart control-plane components. and eventually you also need to re-distribute the renewed certificate in case the file is used elsewhere. no cap, don't forget this part or you'll be sitting there like "why is nothing happening" 😭

✨ OPTIONS ✨

  • --cert-dir="/etc/kubernetes/pki" — the path where the certificates get saved. 🍓
  • --config="" — path to a kubeadm configuration file. 📄
  • --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. and if this flag isn't set? a set of standard locations gets searched for an existing kubeconfig file. it'll go looking for you, bestie. 🔍

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

  • --rootfs="" — the path to the 'real' host root filesystem. this makes kubeadm chroot into the path you gave it. very "stepping into another dimension" of it. 🌈
  • --version=false — here's the breakdown: --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. 🏷️

🧚 SEE ALSO 🧚

💜 HISTORY 💜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! iconic behavior honestly. ⭐

and that's the whole page, bestie!! this one's a Manuals / User situation, living under KUBERNETES(1)(kubernetes), and it's been out here since January 2015 doing its thing. go renew those certs, restart those control-plane components, and slay the day. 💖✨🎀🦋🌸💅🫶👑🌈

📦 where this page comes from