{"id":397407,"date":"2021-03-23T22:04:40","date_gmt":"2021-03-23T14:04:40","guid":{"rendered":"http:\/\/4563.org\/?p=397407"},"modified":"2021-03-23T22:04:40","modified_gmt":"2021-03-23T14:04:40","slug":"%e6%b1%82%e5%8a%a9-k8s-v1-13-9-kubelet-crt-%e8%af%81%e4%b9%a6%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=397407","title":{"rendered":"\u6c42\u52a9 k8s v1.13.9 kubelet.crt \u8bc1\u4e66\u95ee\u9898"},"content":{"rendered":"
\n
\n
\n

\u6c42\u52a9 k8s v1.13.9 kubelet.crt \u8bc1\u4e66\u95ee\u9898 <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : lifeforwater <\/span> <\/i> 1<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
<\/p>\n

apiserver \u4e00\u76f4\u5728\u62a5\uff1a
E1202 11:28:33.472590 1 authentication.go:65] Unable to authenticate the request due to an error: [x509: certificate has expired or is not yet valid, x509: certificate has expired or is not yet valid] <\/p>\n

\u6267\u884c\uff1afor crt in $(find \/etc\/kubernetes\/pki\/ -name “*.crt”); do openssl x509 -in $crt -noout -dates; done
\/etc\/kubernetes\/pki\/ \u4e0b\u7684\u8bc1\u4e66\u90fd\u6ca1\u8fc7\u671f<\/p>\n

\u6267\u884c\uff1aopenssl x509 -in $(find \/ -name kubelet.crt) -noout -text |grep ‘ Not ‘
\/var\/lib\/kubelet\/pki\/kubelet.crt \u8fc7\u671f\u4e86<\/strong><\/p>\n

\u6267\u884c: openssl x509 -in \/var\/lib\/kubelet\/pki\/kubelet-client-current.pem -noout -text |grep ‘ Not ‘
kubelet-client-current.pem \u6ca1\u8fc7\u671f<\/p>\n

\u6309\u7167\u5b98\u65b9\u6587\u6863\uff08\u6700\u4f4e v1.16 ) https:\/\/v1-16.docs.kubernetes.io\/zh\/docs\/tasks\/tls\/certificate-rotation\/ \u8fd9\u91cc\u7684\u65b9\u6cd5\u672a\u80fd\u89e3\u51b3\uff0c\u53c2\u6570\u4e0d\u652f\u6301 <\/p>\n

\u6c42\u6709\u7a7a\u7684 k8s \u5927\u4f6c\u5e2e\u5fd9\u770b\u770b\uff0c\u591a\u8c22\uff01<\/p>\n<\/p><\/div>\n

\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (5<\/span>) <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n
    \n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : anUglyDog <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    \u4e0d\u8981\u5728 v2 \u8ba8\u8bba\u4e13\u4e1a\u95ee\u9898\uff0c\u56e0\u4e3a\u8fd9\u91cc\u6ca1\u4e00\u4e2a\u4e13\u4e1a\u7684\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : FucUrFrd <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    1.13 \u795e\u4ed9\u8001\u7834\u5c0f\u7cfb\u7edf<\/p>\n

    \u4e0d\u652f\u6301\u81ea\u52a8 renew
    \u4f60\u770b\u624b\u52a8\u5347\u7ea7\u5427\uff0c\u4e0d\u9700\u8981\u505c\u670d<\/p>\n

    github.com\/kubernetes\/kubeadm\/issues\/581 <\/div>\n<\/p><\/div>\n<\/li>\n

  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Jrohy <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    https:\/\/github.com\/yuyicai\/update-kube-cert
    \u8fd9\u4e2a\u65e7\u7248 k8s \u90fd\u652f\u6301\u7684\uff0c\u7eed\u7b7e\u5341\u5e74 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : privil <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @anUglyDog #1 \u4e8c\u4e09\u556a\u556a\u556a\u6253\u8138\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : joesonw <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @privil \u4ed6\u7684\u540d\u5b57\u8bf4\u7684\u5f88\u660e\u767d\u4e86. <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n","protected":false},"excerpt":{"rendered":"

    \u6c42\u52a9 k8s v1.13.9 ku…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/397407"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=397407"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/397407\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=397407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=397407"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=397407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}