KubeOne(1) KubeOne(1)

kubeone-certificates-renew - renew all the certificates of the Kubernetes control plane and kubelets

kubeone certificates renew [flags]

This command will run "kubeadm certs renew all" across control plane VMs and restart control plane pods after that. see more: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#manual-certificate-renewal

Additionally it will approve pending kubelet CSRs.

-h, --help[=false] help for renew

-c, --credentials="" File to source credentials and secrets from

-d, --debug[=false] debug output with stacktrace

-l, --log-format="text" format for logging

-m, --manifest="./kubeone.yaml" Path to the KubeOne config

-t, --tfjson="" Source for terraform output in JSON - to read from stdin. If path is a file, contents will be used. If path is a dictionary, terraform output -json is executed in this path

-v, --verbose[=false] verbose output

kubeone certificates renew --tfjson tf.json --manifest kubeone.yaml

kubeone-certificates(1)

8-Feb-2026 Auto generated by spf13/cobra

Feb 2026 Auto generated by spf13/cobra