# Generate all certificates at once
kubeadm init phase certs all
# Or generate them individually:
kubeadm init phase certs ca # Root CA
kubeadm init phase certs apiserver # API server certificate
kubeadm init phase certs apiserver-kubelet-client # API server to kubelet client cert
kubeadm init phase certs front-proxy-ca # Front proxy CA
kubeadm init phase certs front-proxy-client # Front proxy client cert
kubeadm init phase certs etcd-ca # etcd CA (if using local etcd)
kubeadm init phase certs etcd-server # etcd server cert
kubeadm init phase certs etcd-peer # etcd peer cert
kubeadm init phase certs etcd-healthcheck-client # etcd healthcheck client
kubeadm init phase certs apiserver-etcd-client # API server to etcd client cert
kubeadm init phase certs sa # Service account key pairFor external CA scenarios, kubeadm provides CSR generation
kubeadm certs generate-csr --kubeconfig-dir /etc/kubernetes --cert-dir /etc/kubernetes/pki# Generate all kubeconfig files
kubeadm init phase kubeconfig all
# Or generate them individually:
kubeadm init phase kubeconfig admin # Admin kubeconfig
kubeadm init phase kubeconfig kubelet # Kubelet kubeconfig
kubeadm init phase kubeconfig controller-manager # Controller manager kubeconfig
kubeadm init phase kubeconfig scheduler # Scheduler kubeconfig
Control Plane Component Commands# Generate all at once
kubeadm init phase control-plane all
# Or generate them individually:
kubeadm init phase control-plane apiserver # API server manifest
kubeadm init phase control-plane controller-manager # Controller manager manifest
kubeadm init phase control-plane scheduler # Scheduler manifest# Generate etcd static pod manifest (for local etcd)
kubeadm init phase etcd local# Configure kubelet
kubeadm init phase kubelet-start# Upload all at once
kubeadm init phase upload-config all
# Or one by one
kubeadm init phase upload-config kubeadm # Upload kubeadm config
kubeadm init phase upload-config kubelet # Upload kubelet configkubeadm init phase upload-certskubeadm init phase bootstrap-token# Install all addons
kubeadm init phase addon all
# Or install them individually:
kubeadm init phase addon coredns # CoreDNS addon
kubeadm init phase addon kube-proxy # kube-proxy addon