You are viewing documentation for Kubernetes version: v1.31
Kubernetes v1.31 documentation is no longer actively maintained. The version you are currently viewing is a static snapshot. For up-to-date information, see the latest version.
Generate all certificates
Synopsis
Generate all certificates
kubeadm init phase certs all [flags]
Options
| --apiserver-advertise-address string | |
The IP address the API Server will advertise it's listening on. If not set the default network interface will be used. | |
| --apiserver-cert-extra-sans strings | |
Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names. | |
| --cert-dir string Default: "/etc/kubernetes/pki" | |
The path where to save and store the certificates. | |
| --config string | |
Path to a kubeadm configuration file. | |
| --control-plane-endpoint string | |
Specify a stable IP address or DNS name for the control plane. | |
| --dry-run | |
Don't apply any changes; just output what would be done. | |
| -h, --help | |
help for all | |
| --kubernetes-version string Default: "stable-1" | |
Choose a specific Kubernetes version for the control plane. | |
| --service-cidr string Default: "10.96.0.0/12" | |
Use alternative range of IP address for service VIPs. | |
| --service-dns-domain string Default: "cluster.local" | |
Use alternative domain for services, e.g. "myorg.internal". | |
Options inherited from parent commands
| --rootfs string | |
The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path. | |