kubeadm-init-phase-certs-ca(1)

kubeadm-init-phase-certs-ca1

Generate the self-signed kubernetes ca to provision identities for other kubernetes components

Usage

kubeadm init phase certs ca [OPTIONS]

Eric Paris Jan 2015

Overview

Generate the self-signed Kubernetes CA to provision identities for other Kubernetes components, and save them into ca.crt and ca.key files.

If both files already exist, kubeadm skips the generation step and existing files will be used.

Options

--cert-dir="/etc/kubernetes/pki"
The path where to save and store the certificates.

--config=""
Path to a kubeadm configuration file.

--dry-run=false
Don't apply any changes; just output what would be done.

--kubernetes-version="stable-1"
Choose a specific Kubernetes version for the control plane.

Options inherited from parent commands

--rootfs=""
The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path.

--version=false
--version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version

History

January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!

From kubeadm 1.37.2-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.