Print fresh join command kubeadm
Generate a new token + ready-to-paste worker join line; default tokens expire in 24h
kubeadm token create --print-join-command
more kubeadm
all 5 commands →
Check cert expiration
kubeadm certs check-expiration
Renew all certs then restart
kubeadm certs renew all && systemctl restart kubelet
Plan and apply upgrade
kubeadm upgrade plan && kubeadm upgrade apply v1.30.2
Init HA control-plane endpoint
kubeadm init --control-plane-endpoint "<host>:6443" --upload-certs --pod-network-cidr=10.244.0.0/16