-
Notifications
You must be signed in to change notification settings - Fork 14.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
kubeadm: update the reference documentation for 1.15 (#14596)
* kubeadm-ref: update placeholder generated files * kubeadm-ref: include reset-phase.md document Also update reset.md to reflect the addition of reset phases. * kubeadm-ref: update authored content * kubeadm-ref: remove imports for removed "config upload" commands * kubeadm-ref: add page for kubeadm upgrade phases
- Loading branch information
1 parent
3d1d270
commit 2a0f39f
Showing
125 changed files
with
1,609 additions
and
5,876 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
29 changes: 29 additions & 0 deletions
29
.../reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_certificate-key.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
|
||
Generate certificate keys | ||
|
||
### Synopsis | ||
|
||
|
||
This command will print out a secure randomly-generated certificate key that can be used with | ||
the "init" command. | ||
|
||
You can also use "kubeadm init --experimental-upload-certs" without specifying a certificate key and it will | ||
generate and print one for you. | ||
|
||
|
||
``` | ||
kubeadm alpha certs certificate-key [flags] | ||
``` | ||
|
||
### Options | ||
|
||
``` | ||
-h, --help help for certificate-key | ||
``` | ||
|
||
### Options inherited from parent commands | ||
|
||
``` | ||
--rootfs string [EXPERIMENTAL] The path to the 'real' host root filesystem. | ||
``` | ||
|
25 changes: 25 additions & 0 deletions
25
...reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_check-expiration.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
|
||
Check certificates expiration for a Kubernetes cluster | ||
|
||
### Synopsis | ||
|
||
Checks expiration for the certificates in the local PKI managed by kubeadm. | ||
|
||
``` | ||
kubeadm alpha certs check-expiration [flags] | ||
``` | ||
|
||
### Options | ||
|
||
``` | ||
--cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki") | ||
--config string Path to a kubeadm configuration file. | ||
-h, --help help for check-expiration | ||
``` | ||
|
||
### Options inherited from parent commands | ||
|
||
``` | ||
--rootfs string [EXPERIMENTAL] The path to the 'real' host root filesystem. | ||
``` | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
35 changes: 35 additions & 0 deletions
35
...reference/setup-tools/kubeadm/generated/kubeadm_alpha_certs_renew_admin.conf.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,35 @@ | ||
|
||
Renew the certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself | ||
|
||
### Synopsis | ||
|
||
Renew the certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself. | ||
|
||
Renewals run unconditionally, regardless of certificate expiration date; extra attributes such as SANs will be based on the existing file/certificates, there is no need to resupply them. | ||
|
||
Renewal by default tries to use the certificate authority in the local PKI managed by kubeadm; as alternative it is possible to use K8s certificate API for certificate renewal, or as a last option, to generate a CSR request. | ||
|
||
After renewal, in order to make changes effective, is is required to restart control-plane components and eventually re-distribute the renewed certificate in case the file is used elsewhere. | ||
|
||
``` | ||
kubeadm alpha certs renew admin.conf [flags] | ||
``` | ||
|
||
### Options | ||
|
||
``` | ||
--cert-dir string The path where to save the certificates (default "/etc/kubernetes/pki") | ||
--config string Path to a kubeadm configuration file. | ||
--csr-dir string The path to output the CSRs and private keys to | ||
--csr-only Create CSRs instead of generating certificates | ||
-h, --help help for admin.conf | ||
--kubeconfig string The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file. (default "/etc/kubernetes/admin.conf") | ||
--use-api Use the Kubernetes certificate API to renew certificates | ||
``` | ||
|
||
### Options inherited from parent commands | ||
|
||
``` | ||
--rootfs string [EXPERIMENTAL] The path to the 'real' host root filesystem. | ||
``` | ||
|
Oops, something went wrong.