关于kubernetes:k8s-证书更新

cat /etc/kubernetes/kubelet.conf

openssl x509 -in /var/lib/kubelet/pki/kubelet-client-current.pem -noout -text |grep 'Not'
openssl x509 -in /var/lib/kubelet/pki/kubelet-client-current.pem -noout -text |grep 'Not'
rm -f /var/lib/kubelet/pki/kubelet-client-current.pem
systemctl restart kubelet
openssl x509 -in /var/lib/kubelet/pki/kubelet-client-current.pem -noout -text |grep 'Not'



 kubectl get csr|grep 'Pending' | awk 'NR>0{print $1}'| xargs kubectl certificate approve