15308555518/ kubekey
1
0
Fork 0
mirror of https://github.com/kubesphere/kubekey.git synced 2025-12-26 01:22:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add renew certificate readme 

Signed-off-by: Forest-L <lilin@yunify.com>
This commit is contained in:
Forest-L 2020-12-30 21:49:21 +08:00
parent 74fc6fae86
commit 5e77b385a6
3 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -277,6 +277,7 @@ Getting cluster info and generating kubekey's configuration file (optional).
* [Storage clients](docs/storage-client.md)
* [Kubectl autocompletion](docs/kubectl-autocompletion.md)
* [Roadmap](docs/roadmap.md)
* [Check-Renew-Certificate](docs/check-renew-certificate.md)
## Contribute

1
README_zh-CN.md
View File

@ -265,6 +265,7 @@ kubectl completion bash >/etc/bash_completion.d/kubectl
* [网络访问](docs/network-access.md)
* [存储客户端](docs/storage-client.md)
* [路线图](docs/roadmap.md)
* [查看或更新证书](docs/check-renew-certificate.md)
## 贡献

45
docs/check-renew-certificate.md Normal file
View File

@ -0,0 +1,45 @@
### Certificate
#### Check certificate expiration
```shell script
./kk certs check-expiration [(-f | --file) path]
-f to specify the configuration file which was generated for cluster creation. This parameter is not required if it is single node.
./kk certs check-expiration
INFO[21:33:59 CST] Listing cluster certs ...
CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY NODE
apiserver.crt Dec 18, 2021 08:27 UTC 352d ca node1
apiserver-kubelet-client.crt Dec 18, 2021 08:27 UTC 352d ca node1
front-proxy-client.crt Dec 18, 2021 08:27 UTC 352d front-proxy-ca node1
admin.conf Dec 18, 2021 08:27 UTC 352d node1
controller-manager.conf Dec 18, 2021 08:27 UTC 352d node1
scheduler.conf Dec 18, 2021 08:27 UTC 352d node1
CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME NODE
ca.crt Dec 16, 2030 08:27 UTC 9y node1
front-proxy-ca.crt Dec 16, 2030 08:27 UTC 9y node1
INFO[21:34:00 CST] Successful.
```
#### Renew certificate
```shell script
./kk certs renew [(-f | --file) path]
-f to specify the configuration file which was generated for cluster creation. This parameter is not required if it is single node.
./kk certs renew
INFO[21:42:51 CST] Renewing cluster certs ...
INFO[21:42:54 CST] Syncing cluster kubeConfig ...
INFO[21:42:55 CST] Listing cluster certs ...
CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY NODE
apiserver.crt Dec 30, 2021 13:42 UTC 364d ca node1
apiserver-kubelet-client.crt Dec 30, 2021 13:42 UTC 364d ca node1
front-proxy-client.crt Dec 30, 2021 13:42 UTC 364d front-proxy-ca node1
admin.conf Dec 30, 2021 13:42 UTC 364d node1
controller-manager.conf Dec 30, 2021 13:42 UTC 364d node1
scheduler.conf Dec 30, 2021 13:42 UTC 364d node1
CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME NODE
ca.crt Dec 16, 2030 08:27 UTC 9y node1
front-proxy-ca.crt Dec 16, 2030 08:27 UTC 9y node1
```