Edit This Page

Generates a self-signed kubernetes CA to provision identities for components of the cluster


Generates the self-signed kubernetes certificate authority and related key, and saves them into ca.crt and ca.key files.

If both files already exist, kubeadm skips the generation step and existing files will be used.

Alpha Disclaimer: this command is currently alpha.

kubeadm alpha phase certs ca [flags]


--cert-dir string     Default: "/etc/kubernetes/pki"
The path where to save the certificates
--config string
Path to kubeadm config file. WARNING: Usage of a configuration file is experimental
-h, --help
help for ca