---
name: "kubeone-certificates-renew"
section: "1"
platform: "linux"
package: "kubeone"
version: "1.12.3-3"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/kubeone-certificates-renew"
---

# kubeone-certificates-renew(1)

renew all the certificates of the Kubernetes control plane and kubelets

## NAME

kubeone-certificates-renew - renew all the certificates of the Kubernetes control plane and kubelets

## SYNOPSIS

**kubeone certificates renew \[flags\]**

## DESCRIPTION

This command will run "kubeadm certs renew all" across control plane VMs and restart control plane pods after that. see more: https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#manual-certificate-renewal

Additionally it will approve pending kubelet CSRs.

## OPTIONS

**-h**, **--help**\[=false\]\
 	help for renew

## OPTIONS INHERITED FROM PARENT COMMANDS

**-c**, **--credentials**=""\
 	File to source credentials and secrets from

**-d**, **--debug**\[=false\]\
 	debug output with stacktrace

**-l**, **--log-format**="text"\
 	format for logging

**-m**, **--manifest**="./kubeone.yaml"\
 	Path to the KubeOne config

**-t**, **--tfjson**=""\
 	Source for terraform output in JSON - to read from stdin. If path is a file, contents will be used. If path is a dictionary, **terraform output -json** is executed in this path

**-v**, **--verbose**\[=false\]\
 	verbose output

## EXAMPLE

```
kubeone certificates renew --tfjson tf.json --manifest kubeone.yaml
```

## SEE ALSO

**[kubeone-certificates(1)](/kubeone-certificates/1.md)**

## HISTORY

8-Feb-2026 Auto generated by spf13/cobra