Refresh certificates configuration file

A YAML file can be supplied to the k8s refresh-certs --external-certificates command to refresh external certificates for a node.

This reference section provides all available options.

Configuration options

front-proxy-client-crt

Type: string

front-proxy-client-key

Type: string

The client key to be used for the front proxy.

apiserver-kubelet-client-crt

Type: string

The client certificate to be used by kubelet for communicating with the kube-apiserver.

apiserver-kubelet-client-key

Type: string

The client key to be used by kubelet for communicating with the kube-apiserver.

admin-client-crt

Type: string

The admin client certificate to be used for Kubernetes services.

admin-client-key

Type: string

The admin client key to be used for Kubernetes services.

kube-proxy-client-crt

Type: string

The client certificate to be used for the kube-proxy.

kube-proxy-client-key

Type: string

The client key to be used for the kube-proxy.

kube-scheduler-client-crt

Type: string

The client certificate to be used for the kube-scheduler.

kube-scheduler-client-key

Type: string

The client key to be used for the kube-scheduler.

kube-controller-manager-client-crt

Type: string

The client certificate to be used for the Kubernetes controller manager.

kube-controller-manager-client-key

Type: string

The client key to be used for the Kubernetes controller manager.

apiserver-crt

Type: string

The certificate to be used for the kube-apiserver.

apiserver-key

Type: string

The key to be used for the kube-apiserver.

kubelet-crt

Type: string

The certificate to be used for the kubelet.

kubelet-key

Type: string

The key to be used for the kubelet.

kubelet-client-crt

Type: string

The certificate to be used for the kubelet client.

kubelet-client-key

Type: string

The key to be used for the kubelet client.