KUBERNETES(1)(kubernetes)

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, so this is one of those kubernetes manual pages (yes, the whole KUBERNETES(1) girlie), originally put together by Eric Paris back in Jan 2015 — and we're about to make it make sense 💖

---

🌸 NAME 🌸

kubeadm certs renew etcd-server — renew the certificate for serving etcd, no cap 🔐✨

---

🎀 SYNOPSIS 🎀

kubeadm certs renew etcd-server [OPTIONS]

---

🦋 DESCRIPTION 🦋

So basically: renew the certificate for serving etcd. That's the whole job. 💅

Renewals run unconditionally, regardless of certificate expiration date — like, she does NOT care if your cert is still valid, she's renewing anyway. Extra attributes such as SANs will be based on the existing file/certificates, so there's literally no need to resupply them. She already knows. She remembers. 🫶

Renewal by default tries to use the certificate authority in the local PKI managed by kubeadm. As an alternative, it's possible to use the K8s certificate API for certificate renewal, or, as a last option, to generate a CSR request. Three paths, pick your fighter ✨

After renewal, in order to make changes effective, you have to restart control-plane components and eventually re-distribute the renewed certificate in case the file is used elsewhere. Not optional, bestie. Do the restart. 😭

---

💖 OPTIONS 💖

• --cert-dir="/etc/kubernetes/pki" — the path where to save the certificates 🗂️
• --config="" — path to a kubeadm configuration file.
• --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file. she'll go looking 🔍

---

👑 OPTIONS INHERITED FROM PARENT COMMANDS 👑

• --rootfs="" — the path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path. yes, chroot, she's that girl 🧚
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version 📌

---

🌈 SEE ALSO 🌈

kubeadm-certs-renew(1),

---

📜 HISTORY 📜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 🙈

---

and that's the whole page, babe 🎀 it's giving Manuals / User energy, version KUBERNETES(1)(kubernetes), dated January 2015 — slay, stay renewed, and go restart those control-plane components 💅💖✨