openssl x509 -in kubernetes.pem  -text -noout
openssl x509 -in etcd.pem  -text -noout
openssl x509 -in kubernetes.pem  -text -noout
openssl x509 -in kube-proxy.pem  -text -noout

 

 

kubeadmin 下载源码

cd  /data
git clone https://github.com/kubernetes/kubernetes.git

 

修改kubeadmin 源码包更新证书策略

 

 

更新kubeadmin

cp  /usr/bin/kubeadm  /usr/bin/kubeadm.old

 

备份各个节点pki

cp -r /etc/kubernetes/pki   /etc/kubernetes/pki.old

 

 

重新生成证书

kubeadmin alpha certs  renew all  --config=/usr/local/install-k8s/core/kubeadmin-config.yaml