KUBERNETES(1)(kubernetes)

πŸ“¦
version 1.37.2 Β· 3 versions
, in arch rolling, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, welcome to the kubernetes manual, section 1, and yes this is the Eric Paris era, January 2015, we're going vintage πŸ’…


πŸŽ€ NAME πŸŽ€

kubeadm certs renew etcd-healthcheck-client β€” renew the certificate for liveness probes to healthcheck etcd 🩺


🌸 SYNOPSIS 🌸

kubeadm certs renew etcd-healthcheck-client [OPTIONS]

πŸ¦‹ DESCRIPTION πŸ¦‹

So what this does is renew the certificate for liveness probes to healthcheck etcd. That's the whole vibe. 🩺✨

Now here's the tea: renewals run unconditionally, no matter what the certificate expiration date says. It does not care. It does not check. Extra attributes like SANs will be based on the existing file/certificates, so you do not need to resupply them β€” the existing ones already ate and left no crumbs πŸ’…

Renewal by default tries to use the certificate authority in the local PKI managed by kubeadm. As an alternative, it's possible to use the K8s certificate API for certificate renewal, or as a last option, to generate a CSR request. Three paths, pick your fighter 🫢

And after renewal, to make changes effective, you are required to restart control-plane components and eventually re-distribute the renewed certificate in case the file is used elsewhere. Not optional, bestie. Do the restart. 😭


πŸ’– OPTIONS πŸ’–

  • --cert-dir="/etc/kubernetes/pki" β€” the path where to save the certificates πŸ“
  • --config="" β€” path to a kubeadm configuration file πŸ“
  • --kubeconfig="/etc/kubernetes/admin.conf" β€” the kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file πŸ”

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

  • --rootfs="" β€” the path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path πŸ‘‘
  • --version=false β€” --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version 🏷️

πŸ”₯ SEE ALSO πŸ”₯


πŸ’€ HISTORY πŸ’€

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! πŸ™ˆ


fr fr, that's the whole page, no cap. go renew that cert, bestie 🫢

Manuals β€” User β€” KUBERNETES(1)(kubernetes) ⭐ that's the source, version and date sign-off, mwah πŸ’‹

πŸ“¦ where this page comes from