KUBERNETES(1)(kubernetes)

📦
version 1.31.14 · 2 versions
, in fedora 43

✨ KUBERNETES(1)(kubernetes) ✨

okay bestie, buckle UP — this is a page from the kubernetes manual, and it's lowkey a relic. written down by Eric Paris back in Jan 2015, and it lives in section 1 of the manual (that's "user commands", iykyk). let's get into it 🫶

🌸 NAME 🌸

kubeadm init phase kubelet-finalize experimental-cert-rotation — Enable kubelet client certificate rotation

💀 DEPRECATED: use enable-client-cert-rotation instead. not me showing you the old one but like. here we are.

🎀 SYNOPSIS 🎀

kubeadm init phase kubelet-finalize experimental-cert-rotation [OPTIONS]

that's it. that's the whole vibe. no positional args, just options, periodt. 💅

🦋 DESCRIPTION 🦋

so what does this actually do? it enables kubelet client certificate rotation. that's the whole job. iconic, honestly. very "does one thing and does it well" of it. 👑

but bestie. listen. it's deprecated. the ✨ correct ✨ way to do this now is enable-client-cert-rotation. this command is the experimental-era version that they kept around, and the manpage itself is telling you to move on. no cap. 🚩

💖 OPTIONS 💖

  • --cert-dir="/etc/kubernetes/pki" — the path where the certificates get saved and stored. yes, /etc/kubernetes/pki is the default, that's literally what the quotes are telling you. 📁
  • --config="""" — path to a kubeadm configuration file. defaults to empty string, so no config file unless you say so. 📝
  • --dry-run=false — don't apply any changes, just print out what would have been done. this is your "let me see the vibes first" mode, and it defaults to false, so it will genuinely go do the thing unless you flip it on. 🧪

🌈 OPTIONS INHERITED FROM PARENT COMMANDS 🌈

these ones aren't even from this command specifically, they're handed down from the parent command like family heirlooms 💜

  • --rootfs="""" — the path to the 'real' host root filesystem. giving it this will make kubeadm chroot into the path you provided. that's a real chroot, so like... know what you're doing. 🫣
  • --version=false — --version and --version=raw both print version information and quit; --version=vX.Y.Z... sets the reported version. so it's a print-and-dip or a set-the-thing, depending on what you feed it. ⭐

👑 SEE ALSO 👑

go read the parent one, fr fr. 📚

🧚 HISTORY 🧚

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — but hopefully they have been automatically generated since! 😭 (their words, not mine, and honestly relatable)

and that's the whole page, bestie!! 🌸🦋💖

this one came out of the Manuals collection, in the User category, for version KUBERNETES(1)(kubernetes) — kubeadm init phase kubelet-finalize experimental-cert-rotation era. mwah. go rotate those certs the non-deprecated way. slay. 💅✨🎀

📦 where this page comes from