k8s证书

 

 

root@ubuntu:~/cmd# kubeadm alpha certs check-expiration
[check-expiration] Reading configuration from the cluster...
[check-expiration] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'

CERTIFICATE                EXPIRES                  RESIDUAL TIME   CERTIFICATE AUTHORITY   EXTERNALLY MANAGED
admin.conf                 Oct 16, 2021 09:13 UTC   191d                                    no      
apiserver                  Oct 16, 2021 09:13 UTC   191d            ca                      no      
apiserver-etcd-client      Oct 16, 2021 09:13 UTC   191d            etcd-ca                 no      
apiserver-kubelet-client   Oct 16, 2021 09:13 UTC   191d            ca                      no      
controller-manager.conf    Oct 16, 2021 09:13 UTC   191d                                    no      
etcd-healthcheck-client    Oct 16, 2021 09:13 UTC   191d            etcd-ca                 no      
etcd-peer                  Oct 16, 2021 09:13 UTC   191d            etcd-ca                 no      
etcd-server                Oct 16, 2021 09:13 UTC   191d            etcd-ca                 no      
front-proxy-client         Oct 16, 2021 09:13 UTC   191d            front-proxy-ca          no      
scheduler.conf             Oct 16, 2021 09:13 UTC   191d                                    no      

CERTIFICATE AUTHORITY   EXPIRES                  RESIDUAL TIME   EXTERNALLY MANAGED
ca                      Oct 14, 2030 09:13 UTC   9y              no      
etcd-ca                 Oct 14, 2030 09:13 UTC   9y              no      
front-proxy-ca          Oct 14, 2030 09:13 UTC   9y              no   

 

 

root@ubuntu:~/cmd# ls  /etc/kubernetes/pki/
apiserver.crt              apiserver-etcd-client.key  apiserver-kubelet-client.crt  ca.crt  ca.srl  front-proxy-ca.crt  front-proxy-client.crt  sa.key
apiserver-etcd-client.crt  apiserver.key              apiserver-kubelet-client.key  ca.key  etcd    front-proxy-ca.key  front-proxy-client.key  sa.pub
root@ubuntu:~/cmd# ls  /etc/kubernetes/pki/

 

https://blog.csdn.net/weixin_30708329/article/details/97545025