kubeone-certificates-renew(1)

kubeone-certificates-renew1

Renew all the certificates of the kubernetes control plane and kubelets

Usage

kubeone certificates renew [flags]

Overview

This command will run "kubeadm certs renew all" across control plane VMs and restart control plane pods after that. see more: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#manual-certificate-renewal

Additionally it will approve pending kubelet CSRs.

Options

-h, --help[=false]
help for renew

Options inherited from parent commands

-c, --credentials=""
File to source credentials and secrets from

-d, --debug[=false]
debug output with stacktrace

-l, --log-format="text"
format for logging

-m, --manifest="./kubeone.yaml"
Path to the KubeOne config

-t, --tfjson=""
Source for terraform output in JSON - to read from stdin. If path is a file, contents will be used. If path is a dictionary, terraform output -json is executed in this path

-v, --verbose[=false]
verbose output

Examples

kubeone certificates renew --tfjson tf.json --manifest kubeone.yaml

History

8-Feb-2026 Auto generated by spf13/cobra

From kubeone 1.12.3-3 in Arch Linux 2026-11-07. Parsed by carta from the page's man source.