kubeadm-certs-generate-csr(1)

1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubeadm  certs generate-csr - Generate keys and certificate signing re‐
10       quests
11
12
13

SYNOPSIS

15       kubeadm certs generate-csr [OPTIONS]
16
17
18

DESCRIPTION

20       Generates keys and certificate signing requests (CSRs) for all the cer‐
21       tificates  required  to run the control plane. This command also gener‐
22       ates partial kubeconfig files with private key data in  the   "users  >
23       user > client-key-data" field, and for each kubeconfig file an accompa‐
24       nying ".csr" file is created.
25
26
27       This  command  is  designed  for  use  in  Kubeadm  External  CA   Mode
28       ⟨https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-
29       certs/#external-ca-mode⟩. It generates CSRs which you can  then  submit
30       to your external certificate authority for signing.
31
32
33       The  PEM encoded signed certificates should then be saved alongside the
34       key files, using ".crt" as the file extension, or in the case of  kube‐
35       config  files,  the PEM encoded signed certificate should be base64 en‐
36       coded and added to the kubeconfig file in the "users > user  >  client-
37       certificate-data" field.
38
39
40

OPTIONS

42       --cert-dir=""      The path where to save the certificates
43
44
45       --config=""      Path to a kubeadm configuration file.
46
47
48       --kubeconfig-dir="/etc/kubernetes"       The  path  where  to  save the
49       kubeconfig file.
50
51
52

OPTIONS INHERITED FROM PARENT COMMANDS

54       --azure-container-registry-config=""      Path to the  file  containing
55       Azure container registry configuration information.
56
57
58       --rootfs=""       [EXPERIMENTAL]  The  path  to  the  'real'  host root
59       filesystem.
60
61
62       --version=false      Print version information and quit
63
64
65

EXAMPLE

67                # The following command will generate keys and CSRs for all control-plane certificates and kubeconfig files:
68                kubeadm certs generate-csr --kubeconfig-dir /tmp/etc-k8s --cert-dir /tmp/etc-k8s/pki
69
70
71
72

HISTORY

79       January 2015, Originally compiled by Eric Paris (eparis at  redhat  dot
80       com)  based  on the kubernetes source material, but hopefully they have
81       been automatically generated since!
82
83
84
85Manuals                              User            KUBERNETES(1)(kubernetes)