ETCD database cluster certificate renewal for Kubernets external database setup
I used these steps to renew the certs on kubernets cluster v1.18.6
.
-
compile the
etcdadm
cert branch codegit clone -b cert https://github.com/pytimer/etcdadm.git cd etcdadm docker run --rm -it -v "$PWD":/etcdadm golang bash cd /etcdadm make cp etcdadm etcdadm-cert
-
copy
etcdadm-cert
file to all three server. -
Renew the cert on first master
/opt/bin/etcdadm-cert certs renew kubeadm alpha certs renew all
-
Reboot the first master
-
check the etcd member and kubernetes certificate expire data
Repeated step 2 to 5 on ther master nodes
use these commands to validate
/opt/bin/etcdctl.sh member list
kubeadm alpha certs check-expiration
Thanks SR