kubernetes Unable to connect to the server: x509: certificate has expired or is not yet valid

• kubernetes Unable to connect to the server: x509: certificate has expired or is not yet valid
  • 问题
  • 解决

问题

# kubectl get pods
Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2022-06-28T15:04:21+08:00 is after 2022-06-25T06:11:21
# 
k8s kube-controller-manager Unable to authenticate the request due to an error

证书过期了

解决

更新证书。

# 检测证书过期
kubeadm certs check-expiration
# 更新证书
kubeadm certs renew all

复制config

# 先备份config
cp -rp $Home/.kube/config $Home/.kube/config.bak
# 再替换覆盖
cp -i /etc/kubernetes/admin.conf /root/.kube/config
# bash
kubectl get pod

如果docker证书也不行，请同步当前时间

# x509: certificate has expired or is not yet valid，
ntpdate cn.pool.ntp.org

如果发现后面deploy不起作用，k8s集群证书更新后没有自动重启对呀的组件执行如下命令后解决。

docker ps |grep -E 'k8s_kube-apiserver|k8s_kube-controller-manager|k8s_kube-scheduler|k8s_etcd_etcd' | awk -F ' ' '{print $1}' |xargs docker restart