Init HA control-plane endpoint

Bootstrap HA cluster behind a LB VIP; --upload-certs shares CA for other masters

kubeadm init --control-plane-endpoint "<host>:6443" --upload-certs --pod-network-cidr=10.244.0.0/16
tool
kubeadm5 commands
tags
kubeadmk8ssecurity

More kubeadm commands

  • Print fresh join command
    kubeadm token create --print-join-command

    Generate a new token + ready-to-paste worker join line; default tokens expire in 24h

  • Check cert expiration
    kubeadm certs check-expiration

    List all control-plane cert/kubeconfig expiry dates; catch silent apiserver outages early

  • Renew all certs then restart
    kubeadm certs renew all && systemctl restart kubelet

    Renew every control-plane cert; note: restart static pods (mv manifests) for them to reload

  • Plan and apply upgrade
    kubeadm upgrade plan && kubeadm upgrade apply v1.30.2

    Preview available versions then upgrade control-plane; upgrade kubelet/kubectl separately after

all 5 kubeadm commands