참고로 minikube는 /var/lib/minikube/certs에 있다
[root@minikube home]# kubeadm certs check-expiration
[check-expiration] Reading configuration from the cluster...
[check-expiration] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY EXTERNALLY MANAGED
admin.conf Nov 24, 2022 14:07 UTC 364d no
apiserver Nov 24, 2022 14:07 UTC 364d ca no
apiserver-etcd-client Nov 24, 2022 14:07 UTC 364d etcd-ca no
apiserver-kubelet-client Nov 24, 2022 14:07 UTC 364d ca no
controller-manager.conf Nov 24, 2022 14:07 UTC 364d no
etcd-healthcheck-client Nov 24, 2022 14:07 UTC 364d etcd-ca no
etcd-peer Nov 24, 2022 14:07 UTC 364d etcd-ca no
etcd-server Nov 24, 2022 14:07 UTC 364d etcd-ca no
front-proxy-client Nov 24, 2022 14:07 UTC 364d front-proxy-ca no
scheduler.conf Nov 24, 2022 14:07 UTC 364d no
CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME EXTERNALLY MANAGED
ca Nov 17, 2031 15:30 UTC 9y no
etcd-ca Nov 17, 2031 15:32 UTC 9y no
front-proxy-ca Nov 17, 2031 15:32 UTC 9y no
kubeadm certs generate-csr --cert-dir /home/GOOD --kubeconfig-dir /home/GOOD
cp /etc/kubernetes/pki/ca.* /home/GOOD/
openssl x509 -req -in apiserver.csr -CAcreateserial -CA ca.crt -CAkey ca.key -days 10000 -out apiserver.crt
cd /etc/kubernetes/pki/
rm apiserver.crt
cp /home/GOOD/apiserver.crt .
[root@minikube certs]# kubeadm certs check-expiration
[check-expiration] Reading configuration from the cluster...
[check-expiration] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY EXTERNALLY MANAGED
admin.conf Nov 24, 2022 14:07 UTC 364d no
apiserver Apr 12, 2049 13:32 UTC 27y ca no
apiserver-etcd-client Nov 24, 2022 14:07 UTC 364d etcd-ca no
apiserver-kubelet-client Nov 24, 2022 14:07 UTC 364d ca no
controller-manager.conf Nov 24, 2022 14:07 UTC 364d no
etcd-healthcheck-client Nov 24, 2022 14:07 UTC 364d etcd-ca no
etcd-peer Nov 24, 2022 14:07 UTC 364d etcd-ca no
etcd-server Nov 24, 2022 14:07 UTC 364d etcd-ca no
front-proxy-client Nov 24, 2022 14:07 UTC 364d front-proxy-ca no
scheduler.conf Nov 24, 2022 14:07 UTC 364d no
CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME EXTERNALLY MANAGED
ca Nov 17, 2031 15:30 UTC 9y no
etcd-ca Nov 17, 2031 15:32 UTC 9y no
front-proxy-ca Nov 17, 2031 15:32 UTC 9y no
[root@minikube certs]#
'나는 노동자 > KUBERNETES' 카테고리의 다른 글
| jupyter from notebook.auth import passwd 암호변경 (0) | 2023.12.24 |
|---|---|
| GRAFANA Time Range(V9.3.6 UP) (0) | 2023.02.24 |
| 인증서 갱신 - 전통적인 방법 (0) | 2021.11.24 |
| kubelet.conf certification 기간 확인 (0) | 2021.11.24 |
| 계속 꺼지는 etcd 컨테이너 etcd 용량 줄이기 (0) | 2021.11.21 |