Edit This Page

Generates a self-signed CA to provision identities for etcd


Generates the self-signed etcd certificate authority and related key and saves them into etcd/ca.crt and etcd/ca.key files.

If both files already exist, kubeadm skips the generation step and existing files will be used.

Alpha Disclaimer: this command is currently alpha.

kubeadm alpha phase certs etcd-ca [flags]


--cert-dir string     Default: "/etc/kubernetes/pki"
The path where to save the certificates
--config string
Path to kubeadm config file. WARNING: Usage of a configuration file is experimental
-h, --help
help for etcd-ca