---
name: "kubeadm-certs-check-expiration"
section: "1"
platform: "linux"
package: "kubeadm"
version: "1.37.2-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/kubeadm-certs-check-expiration"
---

# kubeadm-certs-check-expiration(1)

Check certificates expiration for a Kubernetes cluster

Eric Paris Jan 2015

## NAME

kubeadm certs check-expiration - Check certificates expiration for a Kubernetes cluster

## SYNOPSIS

**kubeadm certs check-expiration** \[OPTIONS\]

## DESCRIPTION

Checks expiration for the certificates in the local PKI managed by kubeadm.

## OPTIONS

**--allow-missing-template-keys**=true\
 	If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.

**--cert-dir**="/etc/kubernetes/pki"\
 	The path where to save the certificates

**--config**=""\
 	Path to a kubeadm configuration file.

**--kubeconfig**="/etc/kubernetes/admin.conf"\
 	The kubeconfig file to use when talking to the cluster. If the flag is not set, a set of standard locations can be searched for an existing kubeconfig file.

**-o**, **--output**="text"\
 	Output format. One of: text\|json\|yaml\|kyaml\|go-template\|go-template-file\|template\|templatefile\|jsonpath\|jsonpath-as-json\|jsonpath-file.

**--show-managed-fields**=false\
 	If true, keep the managedFields when printing objects in JSON or YAML format.

## OPTIONS INHERITED FROM PARENT COMMANDS

**--rootfs**=""\
 	The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path.

**--version**=false\
 	\--version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version

## SEE ALSO

**[kubeadm-certs(1)](/kubeadm-certs/1.md)**,

## HISTORY

January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!