root@k8s-master01 \~\]# sudo kubeadm certs renew all
\[renew\] Reading configuration from the cluster...
\[renew\] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself renewed
certificate for serving the Kubernetes API renewed
certificate the apiserver uses to access etcd renewed
certificate for the API server to connect to kubelet renewed
certificate embedded in the kubeconfig file for the controller manager to use renewed
certificate for liveness probes to healthcheck etcd renewed
certificate for etcd nodes to communicate with each other renewed
certificate for serving etcd renewed
certificate for the front proxy client renewed
certificate embedded in the kubeconfig file for the scheduler manager to use renewed
certificate embedded in the kubeconfig file for the super-admin renewed
Done renewing certificates. You must restart the kube-apiserver, kube-controller-manager, kube-scheduler and etcd, so that they can use the new certificates.
\[root@k8s-master01 \~\]#
好的,根据提示,你已经成功更新了证书,接下来你需要重启相关的控制平面组件,以便它们加载并使用新的证书。这些组件通常作为静态 Pod (static pods) 运行在你的主节点上,由 `kubelet`直接管理。
**接下来的操作步骤:**
1. **重启 `kubelet` 服务:**
在你的主节点 (`k8s-master01`) 上,执行以下命令来重启 `kubelet` 服务。重启 `kubelet` 会使其重新启动由它管理的静态 Pod(包括 `kube-apiserver`, `kube-controller-manager`, `kube-scheduler` 和 `etcd`)。
```bash
sudo systemctl restart kubelet
```
* **如果你有多个主节点 (HA 集群):** 你需要在**每一个主节点** 上都执行 `sudo systemctl restart kubelet` 命令。
2. **验证组件是否已重启并正常运行:**
等待一两分钟,让组件有时间重新启动。然后进行检查:
* **检查静态 Pod 的状态:**
```bash
kubectl get pods -n kube-system
```
查看 `kube-apiserver-k8s-master01`, `kube-controller-manager-k8s-master01`, `kube-scheduler-k8s-master01` 和 `etcd-k8s-master01` (Pod 名称中的主机名部分可能与你的节点名一致) 是否处于 `Running` 状态,并注意它们的 `AGE` 是否比较新,表明它们是最近重启的。
* **检查组件日志 (可选,用于排错):**
如果某个 Pod 没有正常启动,你可以查看它的日志:
```bash
kubectl logs
k8s更新证书
ascarl20102025-06-04 12:09
相关推荐
不开心就吐槽1 小时前
docker-compose方式快速安装MySQL芥子沫2 小时前
Docker安装思源笔记&使用指南行思理2 小时前
macos 下 docker使用方法 新手教程团儿.2 小时前
Docker Swarm:打造高效、可扩展的容器编排引擎,引领微服务新纪元(上)small_white_robot2 小时前
vulnerable_docker_containement 靶机橙色云-智橙协同研发3 小时前
PLM实施专家宝典:离散制造企业工程变更的“流程金融”方案丈剑走天涯5 小时前
kubernetes 源码编译(ubuntu) kubernetes-1.34.1..Move...5 小时前
基于VMware和Cent OS的Docker Engine安装与配置信仰_2739932435 小时前
Eureka 多层缓存机制详解路漫漫其修远兮sjw5 小时前
常用docker命令速查表