KUBERNETES(1)(kubernetes)

✨ NAME ✨

kubeadm certs renew super-admin.conf — bestie, this one renews the certificate embedded in the kubeconfig file for the super-admin 👑

This page lives in the KUBERNETES(1)(kubernetes) manual, and the whole thing was originally compiled by Eric Paris back in Jan 2015 💖

---

🌸 SYNOPSIS 🌸

kubeadm certs renew super-admin.conf [OPTIONS]

---

💅 DESCRIPTION 💅

So what this does is renew the certificate embedded in the kubeconfig file for the super-admin. That's the vibe. That's the whole assignment. 🫶

Renewals run unconditionally, no cap — it does not care whether your certificate expiration date says it's fine or not. It's renewing anyway, periodt. And extra attributes like SANs get based on the existing file/certificates, so you do not need to resupply them. Not me saving you a whole extra step 😌

By default, renewal tries to use the certificate authority in the local PKI managed by kubeadm. As an alternative, it's possible to use the K8s certificate API for certificate renewal. And as a last option — the final resort, the backup backup — it can generate a CSR request. Options on options, we love to see it 🌈

Now listen, this part matters: after renewal, to make your changes actually effective, you have to restart control-plane components, and eventually re-distribute the renewed certificate if the file is used elsewhere too. It's giving "you did the thing but the thing isn't live yet" 💀

---

⭐ OPTIONS ⭐

• --cert-dir="/etc/kubernetes/pki" — the path where to save the certificates 💾
• --config="" — path to a kubeadm configuration file 📄
• --kubeconfig="/etc/kubernetes/admin.conf" — the kubeconfig file to use when talking to the cluster. And if the flag is not set, a set of standard locations can be searched for an existing kubeconfig file 🔍

---

🎀 OPTIONS INHERITED FROM PARENT COMMANDS 🎀

These cuties came from the parent commands, so they're here too:

• --rootfs="" — the path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path 🌀
• --version=false — --version and --version=raw print version information and then quit; --version=vX.Y.Z... sets the reported version 🏷️

---

🌈 SEE ALSO 🌈

• kubeadm-certs-renew(1),

---

📜 HISTORY 📜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 🙈

---

Okay that's the whole page, bestie — go forth and renew that super-admin cert 💖✨ This was the Manuals edition, User section, KUBERNETES(1)(kubernetes) 🦋🌸👑