cp -rp /etc/kubernetes /etc/kubernetes.bak
rm -f /etc/kubernetes/pki/apiserver*
rm -f /etc/kubernetes/pki/front-proxy-client.*
rm -rf /etc/kubernetes/pki/etcd/healthcheck-client.*
rm -rf /etc/kubernetes/pki/etcd/server.*
rm -rf /etc/kubernetes/pki/etcd/peer.*
备注:可以使用命令
openssl x509 -in [证书全路径] -noout -text
查看证书详情
在当前路径下新建config.yaml
kind: MasterConfiguration
apiVersion: kubeadm.k8s.io/v1alpha1
kubernetesVersion: v1.11.0
api:
advertiseAddress: 10.0.8.68(主节点机器IP)
然后执行
kubeadm alpha phase certs all --config config.yaml
mv /etc/kubernetes/
mv /etc/kubernetes/*.conf /tmp/
kubeadm alpha phase kubeconfig all --config config.yaml
systemctl restart kubelet
openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep ' Not '
其他同理
#覆盖配置文件
cp -rfp /etc/kubernetes/admin.conf ~/.kube/config
kubectl get no
查看执行问题
journalctl -u kubelet -f
子节点更新
kubeadm token create --config=conf.yaml
copy 生成的token值
2.删除/var/lib/kubelet/pki/下的所有文件
3.替换/etc/kubernetes/bootstrap-kubelet.conf中的token(红色框的部分)为上面创建的token值
4重启kubelet 服务,systemctl restart kubelet