kubeadm-alpha-certs-generate-csr(1)

1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubeadm  alpha certs generate-csr - Generate keys and certificate sign‐
10       ing requests
11
12
13

SYNOPSIS

15       kubeadm alpha certs generate-csr [OPTIONS]
16
17
18

DESCRIPTION

20       Generates keys and certificate signing requests (CSRs) for all the cer‐
21       tificates  required  to run the control plane. This command also gener‐
22       ates partial kubeconfig files with private key data in  the   "users  >
23       user > client-key-data" field, and for each kubeconfig file an accompa‐
24       nying ".csr" file is created.
25
26
27       This  command  is  designed  for  use  in  Kubeadm  External  CA   Mode
28       ⟨https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-
29       certs/#external-ca-mode⟩. It generates CSRs which you can  then  submit
30       to your external certificate authority for signing.
31
32
33       The  PEM encoded signed certificates should then be saved alongside the
34       key files, using ".crt" as the file extension, or in the case of  kube‐
35       config  files,  the PEM encoded signed certificate should be base64 en‐
36       coded and added  to  the  kubeconfig  file  in  the  "users  >  user  >
37       client-certificate-data" field.
38
39
40

OPTIONS

42       --cert-dir=""      The path where to save the certificates
43
44
45       --config=""      Path to a kubeadm configuration file.
46
47
48       --kubeconfig-dir="/etc/kubernetes"       The  path  where  to  save the
49       kubeconfig file.
50
51
52

OPTIONS INHERITED FROM PARENT COMMANDS

54       --azure-container-registry-config=""      Path to the  file  containing
55       Azure container registry configuration information.
56
57
58       --log-flush-frequency=5s       Maximum  number  of  seconds between log
59       flushes
60
61
62       --rootfs=""      [EXPERIMENTAL]  The  path  to  the  'real'  host  root
63       filesystem.
64
65
66       --version=false      Print version information and quit
67
68
69

EXAMPLE

71                # The following command will generate keys and CSRs for all control-plane certificates and kubeconfig files:
72                kubeadm alpha certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
73
74
75
76

HISTORY

83       January  2015,  Originally compiled by Eric Paris (eparis at redhat dot
84       com) based on the kubernetes source material, but hopefully  they  have
85       been automatically generated since!
86
87
88
89Manuals                              User            KUBERNETES(1)(kubernetes)