kubeadm commands

5 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 5 shown

  • Init HA control-plane endpoint
    kubeadm init --control-plane-endpoint "<host>:6443" --upload-certs --pod-network-cidr=10.244.0.0/16

    Bootstrap HA cluster behind a LB VIP; --upload-certs shares CA for other masters

    k8s · security

  • Print fresh join command
    kubeadm token create --print-join-command

    Generate a new token + ready-to-paste worker join line; default tokens expire in 24h

    k8s · secrets

  • Check cert expiration
    kubeadm certs check-expiration

    List all control-plane cert/kubeconfig expiry dates; catch silent apiserver outages early

    tls · troubleshooting

  • Renew all certs then restart
    kubeadm certs renew all && systemctl restart kubelet

    Renew every control-plane cert; note: restart static pods (mv manifests) for them to reload

    tls · troubleshooting

  • Plan and apply upgrade
    kubeadm upgrade plan && kubeadm upgrade apply v1.30.2

    Preview available versions then upgrade control-plane; upgrade kubelet/kubectl separately after

    k8s · troubleshooting