15308555518/ kubekey
1
0
Fork 0
mirror of https://github.com/kubesphere/kubekey.git synced 2025-12-26 01:22:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
kubekey/docs/check-renew-certificate.md
Forest-L 5e77b385a6 Add renew certificate readme 
Signed-off-by: Forest-L <lilin@yunify.com>
2020-12-30 21:49:21 +08:00

2.6 KiB
Raw Blame History

Certificate

Check certificate expiration

./kk certs check-expiration [(-f | --file) path]

-f to specify the configuration file which was generated for cluster creation. This parameter is not required if it is single node.

./kk certs check-expiration
INFO[21:33:59 CST] Listing cluster certs ...                    
CERTIFICATE                    EXPIRES                  RESIDUAL TIME   CERTIFICATE AUTHORITY   NODE
apiserver.crt                  Dec 18, 2021 08:27 UTC   352d            ca                      node1   
apiserver-kubelet-client.crt   Dec 18, 2021 08:27 UTC   352d            ca                      node1   
front-proxy-client.crt         Dec 18, 2021 08:27 UTC   352d            front-proxy-ca          node1   
admin.conf                     Dec 18, 2021 08:27 UTC   352d                                    node1   
controller-manager.conf        Dec 18, 2021 08:27 UTC   352d                                    node1   
scheduler.conf                 Dec 18, 2021 08:27 UTC   352d                                    node1   

CERTIFICATE AUTHORITY   EXPIRES                  RESIDUAL TIME   NODE
ca.crt                  Dec 16, 2030 08:27 UTC   9y              node1   
front-proxy-ca.crt      Dec 16, 2030 08:27 UTC   9y              node1   
INFO[21:34:00 CST] Successful.

Renew certificate

./kk certs renew [(-f | --file) path]

-f to specify the configuration file which was generated for cluster creation. This parameter is not required if it is single node.

./kk certs renew
INFO[21:42:51 CST] Renewing cluster certs ...                   
INFO[21:42:54 CST] Syncing cluster kubeConfig ...               
INFO[21:42:55 CST] Listing cluster certs ...                    
CERTIFICATE                    EXPIRES                  RESIDUAL TIME   CERTIFICATE AUTHORITY   NODE
apiserver.crt                  Dec 30, 2021 13:42 UTC   364d            ca                      node1   
apiserver-kubelet-client.crt   Dec 30, 2021 13:42 UTC   364d            ca                      node1   
front-proxy-client.crt         Dec 30, 2021 13:42 UTC   364d            front-proxy-ca          node1   
admin.conf                     Dec 30, 2021 13:42 UTC   364d                                    node1   
controller-manager.conf        Dec 30, 2021 13:42 UTC   364d                                    node1   
scheduler.conf                 Dec 30, 2021 13:42 UTC   364d                                    node1   

CERTIFICATE AUTHORITY   EXPIRES                  RESIDUAL TIME   NODE
ca.crt                  Dec 16, 2030 08:27 UTC   9y              node1   
front-proxy-ca.crt      Dec 16, 2030 08:27 UTC   9y              node1