1KUBERNETES(1)                      Jan 2015                      KUBERNETES(1)
2
3
4

NAME

6       kubeadm  init - Run this command in order to set up the Kubernetes con‐
7       trol plane
8
9
10

SYNOPSIS

12       kubeadm init [OPTIONS]
13
14
15

DESCRIPTION

17       Run this command in order to set up the Kubernetes control plane
18
19
20       The "init" command executes the following phases:
21
22
23              preflight                  Run pre-flight checks
24              kubelet-start              Write kubelet settings and (re)start the kubelet
25              certs                      Certificate generation
26                /front-proxy-ca            Generate the self-signed CA to provision identities for front proxy
27                /front-proxy-client        Generate the certificate for the front proxy client
28                /etcd-ca                   Generate the self-signed CA to provision identities for etcd
29                /etcd-server               Generate the certificate for serving etcd
30                /etcd-peer                 Generate the certificate for etcd nodes to communicate with each other
31                /apiserver-etcd-client     Generate the certificate the apiserver uses to access etcd
32                /etcd-healthcheck-client   Generate the certificate for liveness probes to healtcheck etcd
33                /ca                        Generate the self-signed Kubernetes CA to provision identities for other Kubernetes components
34                /apiserver                 Generate the certificate for serving the Kubernetes API
35                /apiserver-kubelet-client  Generate the certificate for the API server to connect to kubelet
36                /sa                        Generate a private key for signing service account tokens along with its public key
37              kubeconfig                 Generate all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
38                /admin                     Generate a kubeconfig file for the admin to use and for kubeadm itself
39                /kubelet                   Generate a kubeconfig file for the kubelet to use *only* for cluster bootstrapping purposes
40                /controller-manager        Generate a kubeconfig file for the controller manager to use
41                /scheduler                 Generate a kubeconfig file for the scheduler to use
42              control-plane              Generate all static Pod manifest files necessary to establish the control plane
43                /apiserver                 Generates the kube-apiserver static Pod manifest
44                /controller-manager        Generates the kube-controller-manager static Pod manifest
45                /scheduler                 Generates the kube-scheduler static Pod manifest
46              etcd                       Generate static Pod manifest file for local etcd
47                /local                     Generate the static Pod manifest file for a local, single-node local etcd instance
48              upload-config              Upload the kubeadm and kubelet configuration to a ConfigMap
49                /kubeadm                   Upload the kubeadm ClusterConfiguration to a ConfigMap
50                /kubelet                   Upload the kubelet component config to a ConfigMap
51              upload-certs               Upload certificates to kubeadm-certs
52              mark-control-plane         Mark a node as a control-plane
53              bootstrap-token            Generates bootstrap tokens used to join a node to a cluster
54              addon                      Install required addons for passing Conformance tests
55                /coredns                   Install the CoreDNS addon to a Kubernetes cluster
56                /kube-proxy                Install the kube-proxy addon to a Kubernetes cluster
57
58
59
60

OPTIONS

62       --apiserver-advertise-address=""
63           The IP address the API Server will advertise it's listening on.  If
64       not set the default network interface will be used.
65
66
67       --apiserver-bind-port=6443
68           Port for the API Server to bind to.
69
70
71       --apiserver-cert-extra-sans=[]
72           Optional  extra Subject Alternative Names (SANs) to use for the API
73       Server serving certificate. Can be both IP addresses and DNS names.
74
75
76       --cert-dir="/etc/kubernetes/pki"
77           The path where to save and store the certificates.
78
79
80       --certificate-key=""
81           Key  used  to  encrypt  the  control-plane  certificates   in   the
82       kubeadm-certs Secret.
83
84
85       --config=""
86           Path to a kubeadm configuration file.
87
88
89       --cri-socket=""
90           Path  to  the  CRI  socket to connect. If empty kubeadm will try to
91       auto-detect this value; use this option only if you have more than  one
92       CRI installed or if you have non-standard CRI socket.
93
94
95       --dry-run=false
96           Don't apply any changes; just output what would be done.
97
98
99       --experimental-upload-certs=false
100           Upload control-plane certificates to the kubeadm-certs Secret.
101
102
103       --feature-gates=""
104           A  set  of  key=value pairs that describe feature gates for various
105       features. No feature gates are available in this release.
106
107
108       --ignore-preflight-errors=[]
109           A list of checks whose errors will be shown as  warnings.  Example:
110       'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
111
112
113       --image-repository="k8s.gcr.io"
114           Choose a container registry to pull control plane images from
115
116
117       --kubernetes-version="stable-1"
118           Choose a specific Kubernetes version for the control plane.
119
120
121       --node-name=""
122           Specify the node name.
123
124
125       --pod-network-cidr=""
126           Specify range of IP addresses for the pod network. If set, the con‐
127       trol plane will automatically allocate CIDRs for every node.
128
129
130       --service-cidr="10.96.0.0/12"
131           Use alternative range of IP address for service VIPs.
132
133
134       --service-dns-domain="cluster.local"
135           Use alternative domain for services, e.g. "myorg.internal".
136
137
138       --skip-certificate-key-print=false
139           Don't print the key used to encrypt the control-plane certificates.
140
141
142       --skip-phases=[]
143           List of phases to be skipped
144
145
146       --skip-token-print=false
147           Skip printing of the default bootstrap token generated by  'kubeadm
148       init'.
149
150
151       --token=""
152           The token to use for establishing bidirectional trust between nodes
153       and control-plane nodes. The format is [a-z0-9]{6}.[a-z0-9]{16} -  e.g.
154       abcdef.0123456789abcdef
155
156
157       --token-ttl=24h0m0s
158           The  duration  before  the token is automatically deleted (e.g. 1s,
159       2m, 3h). If set to '0', the token will never expire
160
161
162       --upload-certs=false
163           Upload control-plane certificates to the kubeadm-certs Secret.
164
165
166

OPTIONS INHERITED FROM PARENT COMMANDS

168       --azure-container-registry-config=""
169           Path to the file containing Azure container registry  configuration
170       information.
171
172
173       --log-flush-frequency=5s
174           Maximum number of seconds between log flushes
175
176
177       --rootfs=""
178           [EXPERIMENTAL] The path to the 'real' host root filesystem.
179
180
181       --version=false
182           Print version information and quit
183
184
185

SEE ALSO

187       kubeadm(1), kubeadm-init-phase(1),
188
189
190

HISTORY

192       January  2015,  Originally compiled by Eric Paris (eparis at redhat dot
193       com) based on the kubernetes source material, but hopefully  they  have
194       been automatically generated since!
195
196
197
198Eric Paris                  kubernetes User Manuals              KUBERNETES(1)
Impressum