Skip to content

Instantly share code, notes, and snippets.

@ianchen06

ianchen06/change_kubeapi_san.sh

Created August 6, 2019 01:55
Show Gist options
  • Save ianchen06/3677a04fd3f210900aebfb8dbc8870bd to your computer and use it in GitHub Desktop.
Save ianchen06/3677a04fd3f210900aebfb8dbc8870bd to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. ianchen06 created this gist Aug 6, 2019.
    20 changes: 20 additions & 0 deletions change_kubeapi_san.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,20 @@
    kubeadm config view > /root/kubeadmconf.yml
    kubeadm config upload from-file --config /root/kubeadmconf.yml
    cd /etc/kubernetes/pki
    # check cert before
    openssl x509 -in apiserver.crt -text -noout
    rm apiserver.*
    kubeadm init phase certs apiserver --config=/root/kubeadmconf.yml
    # check cert after
    openssl x509 -in apiserver.crt -text -noout
    systemctl daemon-reload
    systemctl restart kubelet
    # find and restart apiserver
    docker ps | grep apiserver
    docker restart apiserver_id

    # Verify connection to apiserver:
    openssl s_client -connect myserver:6443 | openssl x509 -noout -text

    # Reference
    # https://github.com/kubernetes/kubeadm/issues/1447