OC-ADM-OCP-CERTIFICATES(1)

🌸 NAME 🌸

oc adm ocp-certificates — tools for managing a cluster's certificates, no cap. Manual name: OC ADM(1). This is the OpenShift admin command for certificate stuff, and yes bestie, it's giving very important platform energy. 💅

✨ SYNOPSIS ✨

oc adm ocp-certificates [OPTIONS]

🎀 DESCRIPTION 🎀

The official vibe is OCP Certificate Commands.

Actions for managing OpenShift platform certificates are exposed here — that's literally the whole point. 🫶

💅 OPTIONS INHERITED FROM PARENT COMMANDS 💅

Okay so these flags are inherited from the parent commands, and every single one is coming with us. No skipping, no summarizing, we keep the details periodt. ✨

• --as="" — the username to impersonate for the operation. User could be a regular user or a service account in a namespace.
• --as-group=[] — group to impersonate for the operation. This flag can be repeated to specify multiple groups.
• --as-uid="" — UID to impersonate for the operation.
• --as-user-extra=[] — user extras to impersonate for the operation. This flag can be repeated to specify multiple values for the same key.
• --cache-dir="/homeless-shelter/.kube/cache" — default cache directory.
• --certificate-authority="" — path to a cert file for the certificate authority.
• --client-certificate="" — path to a client certificate file for TLS.
• --client-key="" — path to a client key file for TLS.
• --cluster="" — the name of the kubeconfig cluster to use.
• --context="" — the name of the kubeconfig context to use.
• --disable-compression=false — if true, opt-out of response compression for all requests to the server.
• --insecure-skip-tls-verify=false — if true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure. 🚨 Like, actually insecure, bestie — keep that in mind.
• --kubeconfig="" — path to the kubeconfig file to use for CLI requests.
• --kuberc="" — path to the kuberc file to use for preferences. This can be disabled by exporting KUBECTL_KUBERC=false feature gate or turning off the feature KUBERC=off.
• --match-server-version=false — require server version to match client version.
• -n, --namespace="" — if present, the namespace scope for this CLI request.
• --profile="none" — name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex).
• --profile-output="profile.pprof" — name of the file to write the profile to.
• --request-timeout="0" — the length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
• -s, --server="" — the address and port of the Kubernetes API server.
• --tls-server-name="" — server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used.
• --token="" — bearer token for authentication to the API server.
• --user="" — the name of the kubeconfig user to use.
• --warnings-as-errors=false — treat warnings received from the server as errors and exit with a non-zero exit code.

🔥 SEE ALSO 🔥

Bestie, go look at these too — the whole little friend group is here:

oc-adm(1), oc-adm-ocp-certificates-monitor-certificates(1),
oc-adm-ocp-certificates-regenerate-leaf(1),
oc-adm-ocp-certificates-regenerate-machine-config-server-serving-cert(1),
oc-adm-ocp-certificates-regenerate-top-level(1),
oc-adm-ocp-certificates-remove-old-trust(1),
oc-adm-ocp-certificates-update-ignition-ca-bundle-for-machine-config-server(1),

🦋 HISTORY 🦋

June 2016 — ported from the Kubernetes man-doc generator. Iconic archive behavior, honestly. 💀

---

Source/version: Openshift, under the Openshift CLI User Manuals ✨ date: June 2016 ✨ manual: OC ADM(1) — bye bestie, go manage those certs 💖