KUBERNETES(1)(kubernetes)

✨ KUBERNETES(1)(kubernetes) — the join phase control-plane-prepare certs era ✨

okay bestie, welcome to the kubernetes manual (section 1, the user commands one, iykyk) 💖 this page was originally compiled by Eric Paris way back in Jan 2015 and we are still thriving.

---

🎀 NAME 🎀

kubeadm join phase control-plane-prepare certs — generate the certificates for the new control plane components. that's it. that's the whole job. she makes certs. 💅

---

🌸 SYNOPSIS 🌸

kubeadm join phase control-plane-prepare certs [OPTIONS]

---

🦋 DESCRIPTION 🦋

Generate the certificates for the new control plane components. no cap, that's literally the entire description, she's a short queen 👑

---

✨ OPTIONS ✨

• --apiserver-advertise-address="" — if this node is gonna host a brand new control plane instance, this is the IP address the API Server will advertise that it's listening on. if you don't set it, the default network interface gets used instead 🫶
• --config="" — path to a kubeadm configuration file. give her the file, she'll read it 📄
• --control-plane=false — create a new control plane instance on this node. default is false bestie, so flip it if that's the vibe 👑
• --discovery-file="" — for file-based discovery, this is a file or URL you load the cluster information from 🌈
• --discovery-token="" — for token-based discovery, the token used to validate the cluster information that got fetched from the API server 🔑
• --discovery-token-ca-cert-hash=[] — for token-based discovery, validate that the root CA public key matches this hash (format: ":"). note the format string is literally a colon, that's not me being cute 💀
• --discovery-token-unsafe-skip-ca-verification=false — for token-based discovery, this allows joining without --discovery-token-ca-cert-hash pinning. the word "unsafe" is right there in the flag name, so like… read the room 🙈
• --dry-run=false — don't apply any changes, just output what would be done. a little dress rehearsal, no commitment, very demure ✨
• --node-name="" — specify the node name 🏷️
• --tls-bootstrap-token="" — specify the token used to temporarily authenticate with the Kubernetes Control Plane while joining the node 🎟️
• --token="" — use this token for both discovery-token and tls-bootstrap-token when those values are not provided. one token to serve two purposes, multitasking icon 💅

---

💜 OPTIONS INHERITED FROM PARENT COMMANDS 💜

these came from the parent command, she borrowed them and never gave them back 🫶

• --rootfs="" — the path to the 'real' host root filesystem. this will cause kubeadm to chroot into the provided path. yes, chroot. she's going in 🌀
• --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version. so many moods from one flag 🌟

---

🌈 SEE ALSO 🌈

• kubeadm-join-phase-control-plane-prepare(1)

---

📜 HISTORY 📜

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since! (her words, not mine, but she ate with that honesty 😭)

---

and that's the whole page bestie, you're officially certified 🎓💖

sign-off time: this is from the Manuals collection, User section, and it's the KUBERNETES(1)(kubernetes) page, dated Jan 2015. love that for us. periodt. 💅✨🦋