KUBERNETES(1)(kubernetes)

📦
version 1.37.2 · 5 versions
, in arch rolling, fedora 43, fedora 44, nixpkgs unstable

💖 KUBERNETES(1)(kubernetes) — like, the whole manual page but make it make sense 💖

okay bestie, so this page lives in section 1 of the kubernetes manuals, and it was originally written by Eric Paris back in January 2015. yes, that's ancient. we love a legacy queen. 👑

✨ NAME ✨

kubectl certificate — Modify certificate resources

🌸 SYNOPSIS 🌸

kubectl certificate [OPTIONS]

🦋 DESCRIPTION 🦋

Modify certificate resources.

that's it. that's the whole vibe. it's giving "short and mysterious," and honestly? iconic. 💅

🎀 OPTIONS INHERITED FROM PARENT COMMANDS 🎀

so these aren't even its options, bestie — they're inherited from the parent command, which is literally the way that kubectl passes stuff down. here's every single one, no skips, no cuts:

  • --as="" — username to impersonate for the operation. could be a regular user, or a service account in a namespace. dress-up time, but for auth. 🪪
  • --as-group=[] — group to impersonate for the operation. this flag can be repeated to specify multiple groups. stack 'em.
  • --as-uid="" — UID to impersonate for the operation.
  • --as-user-extra=[] — user extras to impersonate for the operation. this flag can be repeated to specify multiple values for the same key.
  • --cache-dir="/home/username/.kube/cache" — default cache directory. yes, the default is that literal path with username in it. no, i'm not kidding.
  • --certificate-authority="" — path to a cert file for the certificate authority.
  • --client-certificate="" — path to a client certificate file for TLS.
  • --client-key="" — path to a client key file for TLS.
  • --cluster="" — the name of the kubeconfig cluster to use.
  • --context="" — the name of the kubeconfig context to use.
  • --disable-compression=false — if true, opt-out of response compression for all requests to the server.
  • --insecure-skip-tls-verify=false — if true, the server's certificate will not be checked for validity. this will make your HTTPS connections insecure. 🚨 bestie, this is literally the "trust me bro" flag. dangerous. do not casually.
  • --kubeconfig="" — path to the kubeconfig file to use for CLI requests.
  • --kuberc="" — path to the kuberc file to use for preferences. this can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.
  • --match-server-version=false — require server version to match client version. it's giving "we must match, we're a set."
  • -n, --namespace="" — if present, the namespace scope for this CLI request.
  • --password="" — password for basic authentication to the API server.
  • --profile="none" — name of profile to capture. one of (none|cpu|heap|goroutine|threadcreate|block|mutex|trace).
  • --profile-output="profile.pprof" — name of the file to write the profile to.
  • --proxy-url="" — proxy URL to use for requests to the API server.
  • --request-timeout="0" — the length of time to wait before giving up on a single server request. non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). a value of zero means don't timeout requests. zero = forever = main character energy. ⏳
  • -s, --server="" — the address and port of the Kubernetes API server.
  • --tls-server-name="" — server name to use for server certificate validation. if it is not provided, the hostname used to contact the server is used.
  • --token="" — bearer token for authentication to the API server.
  • --user="" — the name of the kubeconfig user to use.
  • --username="" — username for basic authentication to the API server.
  • --version=false — --version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version.
  • --warnings-as-errors=false — treat warnings received from the server as errors and exit with a non-zero exit code.
ok quick note: that's 27 inherited options and you're getting all 27, because we don't gatekeep here. 🫶

👑 SEE ALSO 👑

go read these too, they're the friend group:

💀 HISTORY 💀

January 2015, originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material — "but hopefully they have been automatically generated since!" and honestly, same, bestie, may the scripts do the work forever. 🙈✨

kubectl certificate — that's the whole page, no cap. it's short, it's sweet, it's a gateway to approve and deny, and now you know every flag it inherited.

and for the record, this little love letter lives under the Manuals / User section, dated January 2015, and yes it's still out here being iconic in the KUBERNETES(1)(kubernetes) source. slay. 💖🌈🦋

📦 where this page comes from