1KUBERNETES(1) Jan 2015 KUBERNETES(1)
2
3
4
6 kubeadm init - Run this command in order to set up the Kubernetes
7 control plane
8
9
10
12 kubeadm init [OPTIONS]
13
14
15
17 Run this command in order to set up the Kubernetes control plane
18
19
20 The "init" command executes the following phases:
21
22
23 preflight Run pre-flight checks
24 kubelet-start Write kubelet settings and (re)start the kubelet
25 certs Certificate generation
26 /ca Generate the self-signed Kubernetes CA to provision identities for other Kubernetes components
27 /apiserver Generate the certificate for serving the Kubernetes API
28 /apiserver-kubelet-client Generate the certificate for the API server to connect to kubelet
29 /front-proxy-ca Generate the self-signed CA to provision identities for front proxy
30 /front-proxy-client Generate the certificate for the front proxy client
31 /etcd-ca Generate the self-signed CA to provision identities for etcd
32 /etcd-server Generate the certificate for serving etcd
33 /etcd-peer Generate the certificate for etcd nodes to communicate with each other
34 /etcd-healthcheck-client Generate the certificate for liveness probes to healthcheck etcd
35 /apiserver-etcd-client Generate the certificate the apiserver uses to access etcd
36 /sa Generate a private key for signing service account tokens along with its public key
37 kubeconfig Generate all kubeconfig files necessary to establish the control plane and the admin kubeconfig file
38 /admin Generate a kubeconfig file for the admin to use and for kubeadm itself
39 /kubelet Generate a kubeconfig file for the kubelet to use *only* for cluster bootstrapping purposes
40 /controller-manager Generate a kubeconfig file for the controller manager to use
41 /scheduler Generate a kubeconfig file for the scheduler to use
42 control-plane Generate all static Pod manifest files necessary to establish the control plane
43 /apiserver Generates the kube-apiserver static Pod manifest
44 /controller-manager Generates the kube-controller-manager static Pod manifest
45 /scheduler Generates the kube-scheduler static Pod manifest
46 etcd Generate static Pod manifest file for local etcd
47 /local Generate the static Pod manifest file for a local, single-node local etcd instance
48 upload-config Upload the kubeadm and kubelet configuration to a ConfigMap
49 /kubeadm Upload the kubeadm ClusterConfiguration to a ConfigMap
50 /kubelet Upload the kubelet component config to a ConfigMap
51 upload-certs Upload certificates to kubeadm-certs
52 mark-control-plane Mark a node as a control-plane
53 bootstrap-token Generates bootstrap tokens used to join a node to a cluster
54 kubelet-finalize Updates settings relevant to the kubelet after TLS bootstrap
55 /experimental-cert-rotation Enable kubelet client certificate rotation
56 addon Install required addons for passing Conformance tests
57 /coredns Install the CoreDNS addon to a Kubernetes cluster
58 /kube-proxy Install the kube-proxy addon to a Kubernetes cluster
59
60
61
62
64 --apiserver-advertise-address=""
65 The IP address the API Server will advertise it's listening on. If
66 not set the default network interface will be used.
67
68
69 --apiserver-bind-port=6443
70 Port for the API Server to bind to.
71
72
73 --apiserver-cert-extra-sans=[]
74 Optional extra Subject Alternative Names (SANs) to use for the API
75 Server serving certificate. Can be both IP addresses and DNS names.
76
77
78 --cert-dir="/etc/kubernetes/pki"
79 The path where to save and store the certificates.
80
81
82 --certificate-key=""
83 Key used to encrypt the control-plane certificates in the
84 kubeadm-certs Secret.
85
86
87 --config=""
88 Path to a kubeadm configuration file.
89
90
91 --control-plane-endpoint=""
92 Specify a stable IP address or DNS name for the control plane.
93
94
95 --cri-socket=""
96 Path to the CRI socket to connect. If empty kubeadm will try to
97 auto-detect this value; use this option only if you have more than one
98 CRI installed or if you have non-standard CRI socket.
99
100
101 --dry-run=false
102 Don't apply any changes; just output what would be done.
103
104
105 -k, --experimental-kustomize=""
106 The path where kustomize patches for static pod manifests are
107 stored.
108
109
110 --feature-gates=""
111 A set of key=value pairs that describe feature gates for various
112 features. Options are: IPv6DualStack=true|false (ALPHA - default=false)
113 PublicKeysECDSA=true|false (ALPHA - default=false)
114
115
116 --ignore-preflight-errors=[]
117 A list of checks whose errors will be shown as warnings. Example:
118 'IsPrivilegedUser,Swap'. Value 'all' ignores errors from all checks.
119
120
121 --image-repository="k8s.gcr.io"
122 Choose a container registry to pull control plane images from
123
124
125 --kubernetes-version="stable-1"
126 Choose a specific Kubernetes version for the control plane.
127
128
129 --node-name=""
130 Specify the node name.
131
132
133 --pod-network-cidr=""
134 Specify range of IP addresses for the pod network. If set, the
135 control plane will automatically allocate CIDRs for every node.
136
137
138 --service-cidr="10.96.0.0/12"
139 Use alternative range of IP address for service VIPs.
140
141
142 --service-dns-domain="cluster.local"
143 Use alternative domain for services, e.g. "myorg.internal".
144
145
146 --skip-certificate-key-print=false
147 Don't print the key used to encrypt the control-plane certificates.
148
149
150 --skip-phases=[]
151 List of phases to be skipped
152
153
154 --skip-token-print=false
155 Skip printing of the default bootstrap token generated by 'kubeadm
156 init'.
157
158
159 --token=""
160 The token to use for establishing bidirectional trust between nodes
161 and control-plane nodes. The format is [a-z0-9]{6}.[a-z0-9]{16} - e.g.
162 abcdef.0123456789abcdef
163
164
165 --token-ttl=24h0m0s
166 The duration before the token is automatically deleted (e.g. 1s,
167 2m, 3h). If set to '0', the token will never expire
168
169
170 --upload-certs=false
171 Upload control-plane certificates to the kubeadm-certs Secret.
172
173
174
176 --azure-container-registry-config=""
177 Path to the file containing Azure container registry configuration
178 information.
179
180
181 --log-flush-frequency=5s
182 Maximum number of seconds between log flushes
183
184
185 --rootfs=""
186 [EXPERIMENTAL] The path to the 'real' host root filesystem.
187
188
189 --version=false
190 Print version information and quit
191
192
193
195 kubeadm(1), kubeadm-init-phase(1),
196
197
198
200 January 2015, Originally compiled by Eric Paris (eparis at redhat dot
201 com) based on the kubernetes source material, but hopefully they have
202 been automatically generated since!
203
204
205
206Eric Paris kubernetes User Manuals KUBERNETES(1)