<p>When I create a kubernetes cluster I'm getting message as</p>
<p>As a safeguard, uploaded-certs will be deleted in two hours; If necessary, you can use
<code>kubeadm init phase upload-certs --upload-certs</code> to reload certs afterward.</p>
<p>Even if I run the above command when will the new certs expire? Is there any way to set expiration time manually?</p>

shivakumar
<p>Expiry of certificates generated by kubeadm is 365 days. For safety reasons the certificates which are uploaded as secrets into the kubernetes cluster are deleted after 2 hours but that does not mean that the certificates are expired after 2 hours. Certificates will still be valid for 365 days and reside in the file system of the control plane nodes and when you run <code>kubeadm init phase upload-certs --upload-certs</code> it will be uploaded again as secret into the Kubernetes cluster.</p>
<p>From the docs <a href="https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/" rel="nofollow noreferrer">here</a> you can use below command to check expiration of certificates</p>
<pre><code>kubeadm certs check-expiration
</code></pre>
