k8s集群证书过期

在每个master节点执行如下命令

cp -R /etc/kubernetes/ssl /etc/kubernetes/ssl.backup
cp /etc/kubernetes/admin.conf /etc/kubernetes/admin.conf.backup
cp /etc/kubernetes/controller-manager.conf /etc/kubernetes/controller-manager.conf.backup
cp /etc/kubernetes/kubelet.conf /etc/kubernetes/kubelet.conf.backup
cp /etc/kubernetes/scheduler.conf /etc/kubernetes/scheduler.conf.backup

kubeadm alpha certs renew apiserver-kubelet-client
kubeadm alpha certs renew apiserver
kubeadm alpha certs renew front-proxy-client
kubeadm alpha kubeconfig user --client-name system:kube-controller-manager > /etc/kubernetes/controller-manager.conf
kubeadm alpha kubeconfig user --client-name system:kube-scheduler > /etc/kubernetes/scheduler.conf


# kubeadm alpha kubeconfig user --client-name system:node:{nodename} --org system:nodes > /etc/kubernetes/kubelet.conf
# 注意替换{nodename} 名
kubeadm alpha kubeconfig user --client-name system:node:cn-shanghai-on-prem-k8s-master-1  --org system:nodes > /etc/kubernetes/kubelet.conf
kubeadm alpha kubeconfig user --client-name system:node:cn-shanghai-on-prem-k8s-master-2 --org system:nodes > /etc/kubernetes/kubelet.conf
kubeadm alpha kubeconfig user --client-name system:node:cn-shanghai-on-prem-k8s-master-3 --org system:nodes > /etc/kubernetes/kubelet.conf


kubeadm alpha kubeconfig user --client-name kubernetes-admin --org system:masters > /etc/kubernetes/admin.conf
\cp /etc/kubernetes/admin.conf ~/.kube/config

# 重启如下服务或者直接重启master节点

kube-apiserver
kube-controller-manager
kube-scheduler
One way to do this is to find the containers with docker ps and kill them with docker rm -f <id>. Kubelet will automatically start a new instance. You can also just reboot the master node.

参考: ref: https://github.com/kubernetes-sigs/kubespray/issues/5464