k8s Pit mind - Certificate of kubeadm regenerate the certificates expired

Regenerate the certificates

Certificate backup

cp -rp /etc/kubernetes /etc/kubernetes.bak

Remove expired certificates

rm -f /etc/kubernetes/pki/apiserver*
rm -f /etc/kubernetes/pki/front-proxy-client.*
rm -rf /etc/kubernetes/pki/etcd/healthcheck-client.*
rm -rf /etc/kubernetes/pki/etcd/server.*
rm -rf /etc/kubernetes/pki/etcd/peer.*

Regenerate the certificates

kubeadm alpha phase certs all

Rebuild the configuration file

mv /etc/kubernetes/
mv /etc/kubernetes/*.conf /tmp/
kubeadm alpha phase kubeconfig all

Restart kubelet

systemctl restart kubelet

Certificate expiration confirmation

openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ' Not '
其他同理

Cluster confirmation

kubectl get no