0
点赞
收藏
分享

微信扫一扫

k8s集群证书过期,更新证书,证书过期报错:Unable to connect to the server: x509: certificate has expired or is not yet v

在master节点操作:

#查看k8s版本

适用 1.15+

#查看证书有效期
kubeadm alpha certs check-expiration
或者
openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ' Not '

#证书备份
cp -rp /etc/kubernetes /etc/kubernetes.bak

#重新生成证书,使用该命令不用提前删除过期证书
kubeadm alpha certs renew all

#再次查询证书有效期

openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ' Not '

更新用户凭证

cp /etc/kubernetes/admin.conf ~/.kube/config

#重启kubelet
systemctl restart kubelet

#重启apiserver,scheduler,controller-manager 容器
docker ps | grep apiserver
docker ps | grep scheduler
docker ps | grep controller-manager

docker restart containerID

#检测
systemctl status kubelet
kubectl get nodes

[root@masterk8s .kube]# openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ' Not '
Not Before: Jun 4 05:58:25 2020 GMT
Not After : Jun 15 05:38:16 2023 GMT

举报

相关推荐

0 条评论