.nh
.TH "KubeOne" "1" "Feb 2026" "Auto generated by spf13/cobra" ""

.SH NAME
kubeone-certificates-renew - renew all the certificates of the Kubernetes control plane and kubelets


.SH SYNOPSIS
\fBkubeone certificates renew [flags]\fP


.SH DESCRIPTION
This command will run "kubeadm certs renew all" across control plane VMs and restart control plane pods after that.
see more: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#manual-certificate-renewal

.PP
Additionally it will approve pending kubelet CSRs.


.SH OPTIONS
\fB-h\fP, \fB--help\fP[=false]
	help for renew


.SH OPTIONS INHERITED FROM PARENT COMMANDS
\fB-c\fP, \fB--credentials\fP=""
	File to source credentials and secrets from

.PP
\fB-d\fP, \fB--debug\fP[=false]
	debug output with stacktrace

.PP
\fB-l\fP, \fB--log-format\fP="text"
	format for logging

.PP
\fB-m\fP, \fB--manifest\fP="./kubeone.yaml"
	Path to the KubeOne config

.PP
\fB-t\fP, \fB--tfjson\fP=""
	Source for terraform output in JSON - to read from stdin. If path is a file, contents will be used. If path is a dictionary, \fBterraform output -json\fR is executed in this path

.PP
\fB-v\fP, \fB--verbose\fP[=false]
	verbose output


.SH EXAMPLE
.EX
kubeone certificates renew --tfjson tf.json --manifest kubeone.yaml

.EE


.SH SEE ALSO
\fBkubeone-certificates(1)\fP


.SH HISTORY
8-Feb-2026 Auto generated by spf13/cobra