Kubernetes

Generate the certificate the apiserver uses to access etcd, and save them into apiserver-etcd-client.cert and apiserver-etcd-client.key files.

If both files already exist, kubeadm skips the generation step and existing files will be used.

Alpha Disclaimer: this command is currently alpha.

kubeadm init phase certs apiserver-etcd-client [flags]

--cert-dir string Default: "/etc/kubernetes/pki"
	The path where to save and store the certificates.
--config string
	Path to a kubeadm configuration file.
--csr-dir string
	The path to output the CSRs and private keys to
--csr-only
	Create CSRs instead of generating certificates
-h, --help
	help for apiserver-etcd-client
--kubernetes-version string Default: "stable-1"
	Choose a specific Kubernetes version for the control plane.

--rootfs string
	[EXPERIMENTAL] The path to the 'real' host root filesystem.

Documentation