K8s 证书过期

1kubectl get pods
2Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2024-01-08T15:28:17+08:00 is after 2024-01-03T09:22:03Z

1# 备份 kubernetes配置
2cp -r /etc/kubernetes  /etc/kubernetes_bak
3# 检测证书过期
4kubeadm certs check-expiration
5# 更新证书
6kubeadm certs renew all

1kubectl get node
2error: You must be logged in to the server (Unauthorized)

1# 备份配置文件
2cp -rp $HOME/.kube/config $HOME/.kube/config.bak
3# 生成新的配置文件
4sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

 1apiVersion: v1
 2kind: Pod
 3metadata:
 4  name: nginx-simple
 5spec:
 6  containers:
 7  - name: nginx
 8    image: nginx:1.14.2
 9    ports:
10    - containerPort: 80

1kubectl apply simple-pod-yaml

1systemctl restart kubelet

1# 如果是docker作为容器的话，可执行如下命令。其余容器方法类似
2docker ps |grep kube-apiserver|grep -v pause|awk '{print $1}'|xargs -i docker restart {}
3docker ps |grep kube-controller-manage|grep -v pause|awk '{print $1}'|xargs -i docker restart {}
4docker ps |grep kube-scheduler|grep -v pause|awk '{print $1}'|xargs -i docker restart {}