首页 新闻 搜索 专区 学院

如何刷新 Kubernetes 集群的 CA 证书

0
悬赏园豆:50 [待解决问题]

用下面的命令只能刷新非 CA 的证书

kubeadm certs renew all

刷新之后的结果

CERTIFICATE                EXPIRES                  RESIDUAL TIME   CERTIFICATE AUTHORITY   EXTERNALLY MANAGED
admin.conf                 Mar 04, 2022 09:06 UTC   364d                                    no      
apiserver                  Mar 04, 2022 09:06 UTC   364d            ca                      no      
apiserver-etcd-client      Mar 04, 2022 09:06 UTC   364d            etcd-ca                 no      
apiserver-kubelet-client   Mar 04, 2022 09:06 UTC   364d            ca                      no      
controller-manager.conf    Mar 04, 2022 09:06 UTC   364d                                    no      
etcd-healthcheck-client    Mar 04, 2022 09:06 UTC   364d            etcd-ca                 no      
etcd-peer                  Mar 04, 2022 09:06 UTC   364d            etcd-ca                 no      
etcd-server                Mar 04, 2022 09:06 UTC   364d            etcd-ca                 no      
front-proxy-client         Mar 04, 2022 09:06 UTC   364d            front-proxy-ca          no      
scheduler.conf             Mar 04, 2022 09:06 UTC   364d                                    no      

CERTIFICATE AUTHORITY   EXPIRES                  RESIDUAL TIME   EXTERNALLY MANAGED
ca                      Jan 06, 2030 08:51 UTC   8y              no      
etcd-ca                 Jan 06, 2030 08:51 UTC   8y              no      
front-proxy-ca          Jan 18, 2031 09:09 UTC   9y              no

请问如何刷新 CERTIFICATE AUTHORITY 部分的证书?

k8s
dudu的主页 dudu | 高人七级 | 园豆:37728
提问于:2021-03-04 17:48
< >
分享
清除回答草稿
   您需要登录以后才能回答,未注册用户请先注册