KUBERNETES(1) kubernetes KUBERNETES(1) (NAME) kubeadm-init - (control plane) (SYNOPSIS) kubeadm init [OPTIONS] (DESCRIPTION) (control plane) . "init" : preflight (pre-flight) certs /ca CA /apiserver API /apiserver-kubelet-client API kubelet /front-proxy-ca CA front proxy /front-proxy-client front proxy /etcd-ca CA etcd /etcd-server etcd /etcd-peer etcd /etcd-healthcheck-client liveness etcd /apiserver-etcd-client apiserver etcd /sa service account kubeconfig kubeconfig kubeconfig /admin kubeconfig kubeadm /super-admin kubeconfig super-admin /kubelet kubeconfig kubelet ** /controller-manager kubeconfig controller manager /scheduler kubeconfig scheduler etcd etcd /local etcd control-plane /apiserver kube-apiserver /controller-manager kube-controller-manager /scheduler kube-scheduler kubelet-start kubelet () kubelet wait-control-plane upload-config kubeadm kubelet ConfigMap /kubeadm ClusterConfiguration kubeadm ConfigMap /kubelet kubelet ConfigMap upload-certs kubeadm-certs mark-control-plane control-plane bootstrap-token (bootstrap) kubelet-finalize kubelet bootstrap TLS /enable-client-cert-rotation kubelet addon (conformance) /coredns CoreDNS /kube-proxy kube-proxy show-join-command join control-plane worker (OPTIONS) --apiserver-advertise-address="" IP API Server . . --apiserver-bind-port=6443 API Server (bind) . --apiserver-cert-extra-sans=[] (SAN Subject Alternative Names) API Server. IP DNS . --cert-dir="/etc/kubernetes/pki" . --certificate-key="" Secret kubeadm-certs. (hex encoded) AES . --config="" kubeadm. --control-plane-endpoint="" IP DNS . --cri-socket="" CRI . kubeadm CRI CRI . --dry-run=false . --feature-gates="" = (key=value) (feature gates) . : NodeLocalCRISocket=true|false (=true) PublicKeysECDSA=true|false ( - =false) RootlessControlPlane=true|false ( - =false) --ignore-preflight-errors=[] . : 'IsPrivilegedUser,Swap'. 'all' . --image-repository="registry.k8s.io" (pull) . --kubernetes-version="stable-1" . --node-name="" (node). --patches="" "target[suffix][+patchtype].extension". "kube-apiserver0+merge.yaml" "etcd.json". "target" "kube- apiserver" "kube-controller-manager" "kube-scheduler" "etcd" "kubeletconfiguration" "corednsdeployment" . "patchtype" "strategic" "merge" "json" (patch) kubectl . "patchtype" "strategic" . "extension" "json" "yaml" . "suffix" - . --pod-network-cidr="" IP (pod network). CIDR . --service-cidr="10.96.0.0/12" IP VIP . --service-dns-domain="cluster.local" "myorg.internal". --skip-certificate-key-print=false . --skip-phases=[] . --skip-token-print=false (bootstrap token) 'kubeadm init'. --token="" . [a-z0-9]{6}.[a-z0-9]{16} - abcdef.0123456789abcdef --token-ttl=24h0m0s ( 1s 2m 3h). '0' . --upload-certs=false Secret kubeadm-certs. (OPTIONS INHERITED FROM PARENT COMMANDS) --rootfs="" <<>> . kubeadm chroot . --version=false --version --version=raw --version=vX.Y.Z... . (SEE ALSO) kubeadm(1), kubeadm-init-phase(1) (HISTORY) Eric Paris (eparis at redhat dot com) kubernetes ! Eric Paris Jan 2015 KUBERNETES(1)