KUBERNETES(1)(kubernetes)

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, welcome to the kubernetes manual — this page lives in the kubernetes manual, and ngl it was originally put together by Eric Paris back in Jan 2015. pull up a chair, we're gonna talk about renewing one very specific little certificate 💅

---

💖 NAME 💖

kubeadm certs renew front-proxy-client — bestie, it renews the certificate for the front proxy client. that's it. that's the whole vibe. 🎀

---

🦋 SYNOPSIS 🦋

kubeadm certs renew front-proxy-client [OPTIONS]

---

🌸 DESCRIPTION 🌸

so, the assignment: renew the certificate for the front proxy client. iconic, honestly.

renewals run unconditionally — like, no vibe check on the certificate expiration date, it just goes. extra attributes such as SANs will be based on the existing file/certificates, so there's no need to resupply them. she remembers her own lore. 💅

by default, the renewal tries to use the certificate authority in the local PKI managed by kubeadm. as an alternative, it's possible to use the K8s certificate API for certificate renewal, or — as a last option — to generate a CSR request. multiple paths, one queen. 👑

after renewal, to actually make the changes effective, you need to restart control-plane components, and eventually re-distribute the renewed certificate in case the file is used elsewhere. no cap, the renewal alone isn't the whole story, fr fr. 😭

---

✨ OPTIONS ✨

• --cert-dir="/etc/kubernetes/pki" — the path where to save the certificates 🍓
• --config="" — path to a kubeadm configuration file.
• --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. if the flag is not set, a set of standard locations can be searched for an existing kubeconfig file. she'll go looking, don't worry 🧚

---

💜 OPTIONS INHERITED FROM PARENT COMMANDS 💜

these ones came from the parent commands, they're family 🫶

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path. lowkey powerful.
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. so many ways to say who you are, main character energy ⭐

---

🌈 SEE ALSO 🌈

• kubeadm-certs-renew(1)

---

📜 HISTORY 📜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 🙈

---

and that's the whole page, bestie 💖 this one came from the Manuals corner of the User section, and yeah — the date and the source live right there at the bottom with the KUBERNETES(1)(kubernetes) energy. slay, go renew that cert. periodt. 💅✨