---
name: "kubeadm-init-phase-certs-all"
section: "1"
platform: "linux"
package: "kubeadm"
version: "1.37.2-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/kubeadm-init-phase-certs-all"
---

# kubeadm-init-phase-certs-all(1)

Generate all certificates

Eric Paris Jan 2015

## NAME

kubeadm init phase certs all - Generate all certificates

## SYNOPSIS

**kubeadm init phase certs all** \[OPTIONS\]

## DESCRIPTION

Generate all certificates

## OPTIONS

**--apiserver-advertise-address**=""\
 	The IP address the API Server will advertise it's listening on. If not set the default network interface will be used.

**--apiserver-cert-extra-sans**=\[\]\
 	Optional extra Subject Alternative Names (SANs) to use for the API Server serving certificate. Can be both IP addresses and DNS names.

**--cert-dir**="/etc/kubernetes/pki"\
 	The path where to save and store the certificates.

**--config**=""\
 	Path to a kubeadm configuration file.

**--control-plane-endpoint**=""\
 	Specify a stable IP address or DNS name for the control plane.

**--dry-run**=false\
 	Don't apply any changes; just output what would be done.

**--kubernetes-version**="stable-1"\
 	Choose a specific Kubernetes version for the control plane.

**--service-cidr**="10.96.0.0/12"\
 	Use alternative range of IP address for service VIPs.

**--service-dns-domain**="cluster.local"\
 	Use alternative domain for services, e.g. "myorg.internal".

## OPTIONS INHERITED FROM PARENT COMMANDS

**--rootfs**=""\
 	The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path.

**--version**=false\
 	\--version, --version=raw prints version information and quits; --version=vX.Y.Z... sets the reported version

## SEE ALSO

**[kubeadm-init-phase-certs(1)](/kubeadm-init-phase-certs/1.md)**,

## HISTORY

January 2015, Originally compiled by Eric Paris (eparis at redhat dot com) based on the kubernetes source material, but hopefully they have been automatically generated since!