1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubeadm  certs  renew apiserver-etcd-client - Renew the certificate the
10       apiserver uses to access etcd
11
12
13

SYNOPSIS

15       kubeadm certs renew apiserver-etcd-client [OPTIONS]
16
17
18

DESCRIPTION

20       Renew the certificate the apiserver uses to access etcd.
21
22
23       Renewals run  unconditionally,  regardless  of  certificate  expiration
24       date;  extra  attributes  such  as  SANs  will be based on the existing
25       file/certificates, there is no need to resupply them.
26
27
28       Renewal by default tries to use the certificate authority in the  local
29       PKI  managed  by kubeadm; as alternative it is possible to use K8s cer‐
30       tificate API for certificate renewal, or as a last option, to  generate
31       a CSR request.
32
33
34       After  renewal,  in  order  to  make  changes effective, is required to
35       restart control-plane components and eventually re-distribute  the  re‐
36       newed certificate in case the file is used elsewhere.
37
38
39

OPTIONS

41       --cert-dir="/etc/kubernetes/pki"       The  path where to save the cer‐
42       tificates
43
44
45       --config=""      Path to a kubeadm configuration file.
46
47
48       --csr-dir=""      The path to output the CSRs and private keys to
49
50
51       --csr-only=false      Create CSRs instead of generating certificates
52
53
54       --kubeconfig="/etc/kubernetes/admin.conf"      The kubeconfig  file  to
55       use when talking to the cluster. If the flag is not set, a set of stan‐
56       dard locations can be searched for an existing kubeconfig file.
57
58
59

OPTIONS INHERITED FROM PARENT COMMANDS

61       --azure-container-registry-config=""      Path to the  file  containing
62       Azure container registry configuration information.
63
64
65       --log-flush-frequency=5s       Maximum  number  of  seconds between log
66       flushes
67
68
69       --rootfs=""      [EXPERIMENTAL]  The  path  to  the  'real'  host  root
70       filesystem.
71
72
73       --version=false      Print version information and quit
74
75
76

SEE ALSO

78       kubeadm-certs-renew(1),
79
80
81

HISTORY

83       January  2015,  Originally compiled by Eric Paris (eparis at redhat dot
84       com) based on the kubernetes source material, but hopefully  they  have
85       been automatically generated since!
86
87
88
89Manuals                              User            KUBERNETES(1)(kubernetes)