OC-ADM-RESTART-KUBELET(1)
π oc adm restart-kubelet π
okay bestie, welcome to the OC ADM(1) manual page for oc adm restart-kubelet β we're doing every flag, every default, every little detail, and we're gonna make it cute π«Άβ¨
π NAME π
oc adm restart-kubelet β Restart kubelet on the specified nodes
β¨ SYNOPSIS β¨
oc adm restart-kubelet [OPTIONS]
π¦ DESCRIPTION π¦
So the page says: regenerate certificates provided by an OCP v4 cluster. Yes, literally that's the description β we're not changing the facts, bestie π
This command does not wait for changes to be acknowledged by the cluster. Some may take a very long time to roll out into a cluster, with different operators and operands involved for each.
Experimental: This command is under active development and may change without notice. Not me being dramatic β that's literally in the page π
π OPTIONS π
--all=falseβ Select all resources in the namespace of the specified resource types--allow-missing-template-keys=trueβ If true, ignore any errors in templates when a field or map key is missing in the template. Only applies togolangandjsonpathoutput formats.--command=""β command to run after the kubelet stops, before the kubelet starts.--directive=""β run a well-known command while restarting kubelets:RemoveKubeletKubeconfig--dry-run=falseβ Set to true to use server-side dry run.--field-selector=""β Selector (field query) to filter on, supports'=','==', and'!='.(e.g.--field-selector key1=value1,key2=value2). The server only supports a limited number of field queries per type.-f,--filename=[]β identifying the resource.--local=falseβ If true, annotation will NOT contact api-server but run locally.-o,--output=""β Output format. One of: (json,yaml,kyaml,name,go-template,go-template-file,template,templatefile,jsonpath,jsonpath-as-json,jsonpath-file).--parallelism="10%"β parallelism is a raw number or a percentage of the nodes to work with concurrently.-R,--recursive=trueβ Process the directory used in-f,--filenamerecursively. Useful when you want to manage related manifests organized within the same directory.-l,--selector=""β Selector (label query) to filter on, supports'=','==', and'!='.(e.g.-l key1=value1,key2=value2)--show-managed-fields=falseβ If true, keep the managedFields when printing objects in JSON or YAML format.--template=""β Template string or path to template file to use when-o=go-template,-o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].
πΈ OPTIONS INHERITED FROM PARENT COMMANDS πΈ
--as=""β Username to impersonate for the operation. User could be a regular user or a service account in a namespace.--as-group=[]β Group to impersonate for the operation, this flag can be repeated to specify multiple groups.--as-uid=""β UID to impersonate for the operation.--as-user-extra=[]β User extras to impersonate for the operation, this flag can be repeated to specify multiple values for the same key.--cache-dir="/homeless-shelter/.kube/cache"β Default cache directory--certificate-authority=""β Path to a cert file for the certificate authority--client-certificate=""β Path to a client certificate file for TLS--client-key=""β Path to a client key file for TLS--cluster=""β The name of the kubeconfig cluster to use--context=""β The name of the kubeconfig context to use--disable-compression=falseβ If true, opt-out of response compression for all requests to the server--insecure-skip-tls-verify=falseβ If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
β οΈ bestie, that --insecure-skip-tls-verify=false one is literally saying it makes your HTTPS connections insecure if true. Read the flag, love her, respect her π
--kubeconfig=""β Path to the kubeconfig file to use for CLI requests.--kuberc=""β Path to the kuberc file to use for preferences. This can be disabled by exportingKUBECTL_KUBERC=falsefeature gate or turning off the featureKUBERC=off.--match-server-version=falseβ Require server version to match client version-n,--namespace=""β If present, the namespace scope for this CLI request--profile="none"β Name of profile to capture. One of (none|cpu|heap|goroutine|threadcreate|block|mutex)--profile-output="profile.pprof"β Name of the file to write the profile to--request-timeout="0"β The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g.1s,2m,3h). A value of zero means don't timeout requests.-s,--server=""β The address and port of the Kubernetes API server--tls-server-name=""β Server name to use for server certificate validation. If it is not provided, the hostname used to contact the server is used--token=""β Bearer token for authentication to the API server--user=""β The name of the kubeconfig user to use--warnings-as-errors=falseβ Treat warnings received from the server as errors and exit with a non-zero exit code
π EXAMPLE π
# Restart all the nodes, 10% at a time
oc adm restart-kubelet nodes --all --directive=RemoveKubeletKubeconfig
# Restart all the nodes, 20 nodes at a time
oc adm restart-kubelet nodes --all --parallelism=20 --directive=RemoveKubeletKubeconfig
# Restart all the nodes, 15% at a time
oc adm restart-kubelet nodes --all --parallelism=15% --directive=RemoveKubeletKubeconfig
# Restart all the masters at the same time
oc adm restart-kubelet nodes -l node-role.kubernetes.io/master --parallelism=100% --directive=RemoveKubeletKubeconfig
π₯ SEE ALSO π₯
oc-adm(1),β the parent-page link, bestie; go peek at it π«Ά
β HISTORY β
June 2016 β Ported from the Kubernetes man-doc generator
that's the whole page, bestie β source/version: Openshift CLI User Manuals; date: June 2016. mwah πβ¨
π¦ where this page comes from
- nixpkgs unstable: openshift 4.22.0-202605222050
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms