KUBERNETES(1)(kubernetes)

💖 kubeadm init phase certs apiserver-etcd-client 💖

okay bestie, welcome to the KUBERNETES(1) manual page, section kubernetes 🎀 pull up a chair, grab a boba, and let's talk about a cert. yes. a cert. iconic behavior only.

---

✨ NAME ✨

kubeadm init phase certs apiserver-etcd-client — generate the certificate the apiserver uses to access etcd 🦋

---

✨ SYNOPSIS ✨

kubeadm init phase certs apiserver-etcd-client [OPTIONS]

that's it. that's the whole vibe. no positional args, just vibes and flags 💅

---

✨ DESCRIPTION ✨

so what are we actually doing here? we're generating the certificate that the apiserver uses to talk to etcd, and we're saving those little babies into the apiserver-etcd-client.crt and apiserver-etcd-client.key files. 💖

and listen — if both of those files are already there? kubeadm is NOT gonna redo the work. it skips the generation step entirely and just uses the files that already exist. lowkey respectful of your time honestly. ✨

---

✨ OPTIONS ✨

• --cert-dir="/etc/kubernetes/pki" — the path where we save and store the certificates. that's the default, she lives at /etc/kubernetes/pki 💅
• --config="" — path to a kubeadm configuration file. defaults to empty string, so no config file unless you say so 🎀
• --dry-run=false — don't apply any changes, just output what would be done. window shopping for certs, no cap 👀
• --kubernetes-version="stable-1" — choose a specific Kubernetes version for the control plane. default is "stable-1" ⭐

---

✨ OPTIONS INHERITED FROM PARENT COMMANDS ✨

these come from the parent command, so they're giving main character energy by association 👑

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path. fancy 💫
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. so many modes, so little time 🌈

---

✨ SEE ALSO ✨

kubeadm-init-phase-certs(1)

that's the friend. go say hi. 🫶

---

✨ HISTORY ✨

okay history lesson, bestie 📚 January 2015, this was originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 😭 not the hand-compiled lore.

---

⚠️ reminder from your girl: this page is for kubeadm init phase certs apiserver-etcd-client only. don't go applying these flags to random other commands and then act surprised, i'm begging 🙈

---

and that's a wrap, gorgeous 💜 this was the KUBERNETES(1) kubernetes manual, rendered for the Manuals / User section, and the page itself is dated Jan 2015 with Eric Paris as the original author. slay, stay certified, and don't forget to back up your keys 💅✨🎀