4.3 KiB
| reviewers | title | weight | ||
|---|---|---|---|---|
|
kubeadm alpha | 90 |
{{< caution >}}
kubeadm alpha provides a preview of a set of features made available for gathering feedback
from the community. Please try it out and give us feedback!
{{< /caution >}}
kubeadm alpha certs renew
You can renew all Kubernetes certificates using the all subcommand or renew them selectively.
For more details about certificate expiration and renewal see the certificate management documentation.
{{< tabs name="tab-certs-renew" >}} {{< tab name="renew" include="generated/kubeadm_alpha_certs_renew.md" />}} {{< tab name="all" include="generated/kubeadm_alpha_certs_renew_all.md" />}} {{< tab name="admin.conf" include="generated/kubeadm_alpha_certs_renew_admin.conf.md" />}} {{< tab name="apiserver-etcd-client" include="generated/kubeadm_alpha_certs_renew_apiserver-etcd-client.md" />}} {{< tab name="apiserver-kubelet-client" include="generated/kubeadm_alpha_certs_renew_apiserver-kubelet-client.md" />}} {{< tab name="apiserver" include="generated/kubeadm_alpha_certs_renew_apiserver.md" />}} {{< tab name="controller-manager.conf" include="generated/kubeadm_alpha_certs_renew_controller-manager.conf.md" />}} {{< tab name="etcd-healthcheck-client" include="generated/kubeadm_alpha_certs_renew_etcd-healthcheck-client.md" />}} {{< tab name="etcd-peer" include="generated/kubeadm_alpha_certs_renew_etcd-peer.md" />}} {{< tab name="etcd-server" include="generated/kubeadm_alpha_certs_renew_etcd-server.md" />}} {{< tab name="front-proxy-client" include="generated/kubeadm_alpha_certs_renew_front-proxy-client.md" />}} {{< tab name="scheduler.conf" include="generated/kubeadm_alpha_certs_renew_scheduler.conf.md" />}} {{< /tabs >}}
kubeadm alpha certs certificate-key
This command can be used to generate a new control-plane certificate key.
The key can be passed as --certificate-key to kubeadm init and kubeadm join
to enable the automatic copy of certificates when joining additional control-plane nodes.
{{< tabs name="tab-certs-certificate-key" >}} {{< tab name="certificate-key" include="generated/kubeadm_alpha_certs_certificate-key.md" />}} {{< /tabs >}}
kubeadm alpha certs check-expiration
This command checks expiration for the certificates in the local PKI managed by kubeadm. For more details about certificate expiration and renewal see the certificate management documentation.
{{< tabs name="tab-certs-check-expiration" >}} {{< tab name="check-expiration" include="generated/kubeadm_alpha_certs_check-expiration.md" />}} {{< /tabs >}}
kubeadm alpha kubeconfig user
The user subcommand can be used for the creation of kubeconfig files for additional users.
{{< tabs name="tab-kubeconfig" >}} {{< tab name="kubeconfig" include="generated/kubeadm_alpha_kubeconfig.md" />}} {{< tab name="user" include="generated/kubeadm_alpha_kubeconfig_user.md" />}} {{< /tabs >}}
kubeadm alpha kubelet config
Use the following commands to either download the kubelet configuration from the cluster or to enable the DynamicKubeletConfiguration feature.
{{< tabs name="tab-kubelet" >}} {{< tab name="kubelet" include="generated/kubeadm_alpha_kubelet.md" />}} {{< tab name="download" include="generated/kubeadm_alpha_kubelet_config_download.md" />}} {{< tab name="enable-dynamic" include="generated/kubeadm_alpha_kubelet_config_download.md" />}} {{< /tabs >}}
kubeadm alpha selfhosting pivot
The subcommand pivot can be used to convert a static Pod-hosted control plane into a self-hosted one.
{{< tabs name="selfhosting" >}} {{< tab name="selfhosting" include="generated/kubeadm_alpha_selfhosting.md" />}} {{< tab name="pivot" include="generated/kubeadm_alpha_selfhosting_pivot.md" />}} {{< /tabs >}}
What's next
- kubeadm init to bootstrap a Kubernetes control-plane node
- kubeadm join to connect a node to the cluster
- kubeadm reset to revert any changes made to this host by
kubeadm initorkubeadm join