kubeadm certs [page]deterministic

reference

`kubeadm certs` provides utilities for managing certificates. For more details on how these commands can be used, see [Certificate Management with kubeadm](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/).

## kubeadm certs {#cmd-certs}

A collection of operations for operating Kubernetes certificates.

## kubeadm certs renew {#cmd-certs-renew}

You can renew all Kubernetes certificates using the `all` subcommand or renew them selectively. For more details see [Manual certificate renewal](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#manual-certificate-renewal).

## kubeadm certs certificate-key {#cmd-certs-certificate-key}

This command can be used to generate a new control-plane certificate key. The key can be passed as `--certificate-key` to [`kubeadm init`](/docs/reference/setup-tools/kubeadm/kubeadm-init) and [`kubeadm join`](/docs/reference/setup-tools/kubeadm/kubeadm-join) to enable the automatic copy of certificates when joining additional control-plane nodes.

## kubeadm certs check-expiration {#cmd-certs-check-expiration}

This command checks expiration for the certificates in the local PKI managed by kubeadm. For more details see [Check certificate expiration](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#check-certificate-expiration).

## kubeadm certs generate-csr {#cmd-certs-generate-csr}

This command can be used to generate keys and CSRs for all control-plane certificates and kubeconfig files. The user can then sign the CSRs with a CA of their choice. To read more information on how to use the command see [Signing certificate signing requests (CSR) generated by kubeadm](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs#signing-csr).

* [kubeadm init](/docs/reference/setup-tools/kubeadm/kubeadm-init/) to bootstrap a Kubernetes control-plane node * [kubeadm join](/docs/reference/setup-tools/kubeadm/kubeadm-join/) to connect a node to the cluster * [kubeadm reset](/docs/reference/setup-tools/kubeadm/kubeadm-reset/) to revert any changes made to this host by `kubeadm init` or `kubeadm join`

Sources

reference/setup-tools/kubeadm/kubeadm-certs.md · doc — “kubeadm certs”

Related (6)

part_of kubeadm certs {#cmd-certs} — describes conf=1

part_of kubeadm certs renew {#cmd-certs-renew} — describes conf=1

part_of kubeadm certs certificate-key {#cmd-certs-certificate-key} — describes conf=1

part_of kubeadm certs check-expiration {#cmd-certs-check-expiration} — describes conf=1

part_of kubeadm certs generate-csr {#cmd-certs-generate-csr} — describes conf=1

part_of {{% heading "whatsnext" %}} — describes conf=1

← all Docs