KUBERNETES(1)(kubernetes)

✨ KUBERNETES(1)(kubernetes) ✨

okay so bestie, we're in the kubernetes manual, section 1, and today's episode is kubeadm init phase certs sa 💖

Eric Paris started this whole thing back in Jan 2015, and honestly? icon behavior.

---

🌸 NAME 🌸

kubeadm init phase certs sa — generate a private key for signing service account tokens along with its public key 🎀

---

🦋 SYNOPSIS 🦋

kubeadm init phase certs sa [OPTIONS]

---

✨ DESCRIPTION ✨

so what this does is generate the private key for signing service account tokens, plus its matching public key, and then it tucks both of them away into the sa.key and sa.pub files. that's the whole job. she's simple, she's reliable, she slays 💅

and here's the cute part: if both of those files already exist? kubeadm is like "okay you clearly already did this" and skips the generation step entirely — the existing files get used as-is. no overwriting, no drama, no cap 🫶

---

👑 OPTIONS 👑

• --cert-dir="/etc/kubernetes/pki" — the path where to save and store the certificates. that's where all the cert goodies live, periodt.
• --config="" — path to a kubeadm configuration file. default is empty, so you're flying config-free unless you say otherwise.
• --dry-run=false — don't apply any changes; just output what would be done. perfect for the "let me peek before I commit" girlies 🙈
• --kubernetes-version="stable-1" — choose a specific Kubernetes version for the control plane. defaults to stable-1, lowkey iconic of her.

---

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

these ones aren't even hers, she just inherited them like family jewelry ✨

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path. so like, heads up, she's going inside 👀
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. yes she can do all three, she's versatile like that 💜

---

🍓 SEE ALSO 🍓

• kubeadm-init-phase-certs(1),

iykyk 💫

---

🧚 HISTORY 🧚

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! like, imagine hand-writing all this forever? couldn't be me 😭

---

and that's the whole page bestie!! this was the Manuals → User flavor of the KUBERNETES(1)(kubernetes) manual, born way back in January 2015 alongside Eric's original compile. go forth, generate those keys, and stay iconic 👑💖✨