Configuration·Certified Kubernetes Administrator
Renewing Cluster Certificates
`kubeadm certs renew all` rewrites eleven certificates and tells you to restart four components. The apiserver's serving certificate reloads on its own - same container, ATTEMPT 0 - and the restart is for everything else.
Cluster Architecture and Configuration Guide 23 of 103 Advanced
- Kubernetes1.36.4
- Runtimecontainerd 2.2.6
- CNICalico v3.32.1
- TimeAbout 16 min
- Reviewed22 August 2026
| Server Name | IP Address | OS | Roles | CPU | RAM | HDD |
|---|---|---|---|---|---|---|
| CKA3001 | 192.168.0.185 | Ubuntu 26.04 LTS | Control Plane Node | 2 Core | 4 GB | 50 GB |
| CKA3001-NODE01 | 192.168.0.186 | Ubuntu 26.04 LTS | Worker Node | 2 Core | 4 GB | 50 GB |
Before you start
- guide 96 is the failure this prevents - worth reading first, because it is what the deadline looks like when you miss it.
sudoon the control plane. Every command here is privileged.
-
Find out what expires and when
-
Renew, and read the last line
-
Restart the control plane by moving a file