k8s证书过期，更新证书后，没有bootstrap-kubelet.conf文件

k8s版本：v1.23.1

问题出现原因：证书过期，更新证书后，没有bootstrap-kubelet.conf文件

手动创建/etc/kubernetes/bootstrap-kubelet.conf文件

apiVersion: v1
kind: Config
clusters:
  - cluster:
      certificate-authority: /etc/kubernetes/pki/ca.crt
      server: https://<api-server-host>:<api-server-port>
    name: bootstrap
users:
  - name: kubelet-bootstrap
    user:
      token: some-token-value
contexts:
  - context:
      cluster: bootstrap
      user: kubelet-bootstrap
    name: kubelet-bootstrap
current-context: kubelet-bootstrap
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

需要替换的地方：

1. <api-server-host>:<api-server-port>

   可以通过kubectl cluster-info命令查看

   root@master:/etc/kubernetes# kubectl cluster-info
   Kubernetes control plane is running at https://192.168.244.129:6443
   CoreDNS is running at https://192.168.244.129:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
   
   To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
   1
   2
   3
   4
   5

   192.168.244.129:6443就是:

2. token

   执行kubeadm token create --print-join-command命令

   root@master:/etc/kubernetes# kubeadm token create --print-join-command
   kubeadm join 192.168.244.129:6443 --token of413z.k0z2h7fh6c64o3js --discovery-token-ca-cert-hash sha256:095446a765f76f4bacbb04d676606435d26321f7229e76f3672e78a3b7a7b522
   1
   2

   --token 后的值就是需要替换的token了

替换后重启kubelet

systemctl restart kubelet
1

kubeadm init phase kubelet-bootstrap 命令可以创建bootstrap-kubelet.conf文件

该命令是针对 Kubernetes 1.24 及更高版本的。

我没有使用过该命令