k8s 证书过期更新

目录

• 证书过期更新
  • 更新证书
  • 验证

证书过期更新

项目上的k8s是通过kubeadm部署的，现在kubectl get node 报错，发现证书过期

[root@k8s-master ~]# kubectl  get nodes
Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2025-05-27T16:23:17+08:00 is after 2025-04-18T06:38:04Z

更新证书

// 查看已经过期的证书
kubeadm certs check-expiration

//这个命令会重新生成所有控制平面相关的证书，并将它们保存在 /etc/kubernetes/pki/ 目录下
kubeadm certs renew all

//更新 kubeconfig 文件中的客户端证书
rm /etc/kubernetes/admin.conf
kubeadm init phase kubeconfig admin
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

//重启kubelet
systemctl restart kubelet

验证

kubectl get nodes