# kubeadm kubeconfig

LLMS index: [llms.txt](/llms.txt)

---

<!--
`kubeadm kubeconfig` provides utilities for managing kubeconfig files.

For examples on how to use `kubeadm kubeconfig user` see
[Generating kubeconfig files for additional users](/docs/tasks/administer-cluster/kubeadm/kubeadm-certs#kubeconfig-additional-users).
-->
`kubeadm kubeconfig` 提供用来管理 kubeconfig 文件的工具。

如果希望查看如何使用 `kubeadm kubeconfig user` 的示例，
请参阅[为其他用户生成 kubeconfig 文件](/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-certs#kubeconfig-additional-users)。

## kubeadm kubeconfig {#cmd-kubeconfig}

<ul class="nav nav-tabs" id="tabs-tab-kubeconfig" role="tablist"><li class="nav-item"><a data-bs-toggle="tab" class="nav-link active" href="#tabs-tab-kubeconfig-0" role="tab" aria-controls="tabs-tab-kubeconfig-0" aria-selected="true">概述</a></li>
	  </ul>

<div class="tab-content" id="tabs-tab-kubeconfig-content"><div class="tab-body tab-pane fadeshow active"
        id="tabs-tab-kubeconfig-0" role="tabpanel" aria-labelledby="tabs-tab-kubeconfig-0-tab" tabindex="tab-kubeconfig"><!--
### Synopsis

Kubeconfig file utilities.

### Options
-->
<h3 id="概要">概要<a class="td-heading-self-link" href="#%e6%a6%82%e8%a6%81" aria-label="Heading self-link"></a></h3>
<p>kubeconfig 文件工具。</p>
<h3 id="选项">选项<a class="td-heading-self-link" href="#%e9%80%89%e9%a1%b9" aria-label="Heading self-link"></a></h3>
<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>
<tr>
<td colspan="2">-h, --help</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
help for kubeconfig
-->
kubeconfig 操作的帮助命令。
<p>
</td>
</tr>
</tbody>
</table>
<!--
### Options inherited from parent commands
-->
<h3 id="从父命令继承的选项">从父命令继承的选项<a class="td-heading-self-link" href="#%e4%bb%8e%e7%88%b6%e5%91%bd%e4%bb%a4%e7%bb%a7%e6%89%bf%e7%9a%84%e9%80%89%e9%a1%b9" aria-label="Heading self-link"></a></h3>
<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>
<tr>
<td colspan="2">--rootfs string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path.
-->
到“真实”主机根文件系统的路径。设置此标志将导致 kubeadm 切换到所提供的路径。
</p>
</td>
</tr>
</tbody>
</table>
</div></div>


## kubeadm kubeconfig user {#cmd-kubeconfig-user}

<!--
This command can be used to output a kubeconfig file for an additional user.
-->
此命令可用来为其他用户生成一个 kubeconfig 文件。

<ul class="nav nav-tabs" id="tabs-tab-kubeconfig-user" role="tablist"><li class="nav-item"><a data-bs-toggle="tab" class="nav-link active" href="#tabs-tab-kubeconfig-user-0" role="tab" aria-controls="tabs-tab-kubeconfig-user-0" aria-selected="true">user</a></li>
	  </ul>

<div class="tab-content" id="tabs-tab-kubeconfig-user-content"><div class="tab-body tab-pane fadeshow active"
        id="tabs-tab-kubeconfig-user-0" role="tabpanel" aria-labelledby="tabs-tab-kubeconfig-user-0-tab" tabindex="tab-kubeconfig-user"><!--
Output a kubeconfig file for an additional user

### Synopsis
-->
<h3 id="概要">概要<a class="td-heading-self-link" href="#%e6%a6%82%e8%a6%81" aria-label="Heading self-link"></a></h3>
<p>为其他用户输出一个 kubeconfig 文件。</p>
<div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">kubeadm kubeconfig user <span class="o">[</span>flags<span class="o">]</span>
</span></span></code></pre></div><!--
### Examples

```
# Output a kubeconfig file for an additional user named foo
kubeadm kubeconfig user --client-name=foo

# Output a kubeconfig file for an additional user named foo using a kubeadm config file bar
kubeadm kubeconfig user --client-name=foo --config=bar
```
-->
<h3 id="示例">示例<a class="td-heading-self-link" href="#%e7%a4%ba%e4%be%8b" aria-label="Heading self-link"></a></h3>
<div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl"><span class="c1"># 为一个名为 foo 的其他用户输出 kubeconfig 文件</span>
</span></span><span class="line"><span class="cl">kubeadm kubeconfig user --client-name<span class="o">=</span>foo
</span></span><span class="line"><span class="cl">
</span></span><span class="line"><span class="cl"><span class="c1"># 使用 kubeadm 配置文件 bar 为另一个名为 foo 的用户输出 kubeconfig 文件</span>
</span></span><span class="line"><span class="cl">kubeadm alpha kubeconfig user --client-name<span class="o">=</span>foo --config<span class="o">=</span>bar
</span></span></code></pre></div><!--
### Options
-->
<h3 id="选项">选项<a class="td-heading-self-link" href="#%e9%80%89%e9%a1%b9" aria-label="Heading self-link"></a></h3>
<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>
<tr>
<td colspan="2">--client-name string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The name of user. It will be used as the CN if client certificates are created
-->
用户名。如果生成客户端证书，则用作其 CN。
</p>
</td>
</tr>
<tr>
<td colspan="2">--config string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
Path to a kubeadm configuration file.
-->
指向 kubeadm 配置文件的路径。
</p>
</td>
</tr>
<tr>
<td colspan="2">-h, --help</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
help for user
-->
user 操作的帮助命令。
</p>
</td>
</tr>
<tr>
<td colspan="2">--org strings</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The organizations of the client certificate. It will be used as the O if client certificates are created
-->
客户端证书的组织。如果创建客户端证书，此值将用作其 O 字段值。
</p>
</td>
</tr>
<tr>
<td colspan="2">--token string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The token that should be used as the authentication mechanism for this kubeconfig, instead of client certificates
-->
应该用此令牌做为 kubeconfig 的身份验证机制，而不是客户端证书。
</p>
</td>
</tr>
<tr>
<td colspan="2">--validity-period duration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<!--Default: 8760h0m0s-->默认值：8760h0m0s</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The validity period of the client certificate. It is an offset from the current time.
-->
客户证书的合法期限。所设置值为相对当前时间的偏移。
</p>
</td>
</tr>
</tbody>
</table>
<!--
### Options inherited from parent commands
-->
<h3 id="从父命令继承的选项">从父命令继承的选项<a class="td-heading-self-link" href="#%e4%bb%8e%e7%88%b6%e5%91%bd%e4%bb%a4%e7%bb%a7%e6%89%bf%e7%9a%84%e9%80%89%e9%a1%b9" aria-label="Heading self-link"></a></h3>
<table style="width: 100%; table-layout: fixed;">
<colgroup>
<col span="1" style="width: 10px;" />
<col span="1" />
</colgroup>
<tbody>
<tr>
<td colspan="2">--rootfs string</td>
</tr>
<tr>
<td></td><td style="line-height: 130%; word-wrap: break-word;">
<p>
<!--
The path to the 'real' host root filesystem. This will cause kubeadm to chroot into the provided path.
-->
到“真实”主机根文件系统的路径。设置此标志将导致 kubeadm 切换到所提供的路径。
</p>
</td>
</tr>
</tbody>
</table>
</div></div>
