You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

在最开始创建集群的时候我们的apiserver证书可能只加了一个IP，随着集群需要高可用稳定性，所以需要增加master的IP或者迁移master，这个时候就需要重新签发apiserver证书

导出kubeadm-config的内容

kubectl -n kube-system get configmap kubeadm-config -o jsonpath='{.data.ClusterConfiguration}' > kubeadm-init.yaml

查看

apiServer:
  certSANs:
  - 10.10.51.5
  - 10.10.51.11
  extraArgs:
    authorization-mode: Node,RBAC
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta3
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controlPlaneEndpoint: 10.10.51.5:6443
controllerManager: {}
dns: {}
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.aliyuncs.com/google_containers
kind: ClusterConfiguration
kubernetesVersion: v1.23.17
networking:
  dnsDomain: cluster.local
  podSubnet: 10.244.0.0/16
  serviceSubnet: 10.96.0.0/16
scheduler: {}
  • No labels