Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1.10的能使用这个脚本么? #23

Open
chenxushuo opened this issue Aug 26, 2024 · 1 comment
Open

1.10的能使用这个脚本么? #23

chenxushuo opened this issue Aug 26, 2024 · 1 comment

Comments

@chenxushuo
Copy link

No description provided.

@yuyicai
Copy link
Owner

yuyicai commented Aug 27, 2024

可以使用

以前的 readme 有对应的描述。后来几乎没人用老版本了,所以删除了这部分描述。
这个证书更新脚本本来就是为了无法执行 kubeadm alpha phase certs 的老版本而开发的,只有是使用 kubeadm 创建的集群都可以用这个脚步来更新证书,无论是什么版本。

readme 历史记录描述摘要:

kubeadm生成的证书有效期为为1年,虽然1.8版开始提供了证书生成命令(kubeadm alpha phase certs <cert_name>,1.13版开始改为kubeadm init phase certs <cert_name>)
但是1.11版之前执行kubeadm alpha phase certs <cert_name>命令,连不上dl.k8s.io会报错以下错误,从而无法单纯只更新证书:
unable to get URL "https://dl.k8s.io/release/stable-1.11.txt": Get https://dl.k8s.io/release/stable-1.11.txt: dial tcp 35.201.71.162:443: i/o timeout
1.12版之后连不上dl.k8s.io也会执行,1.12之后版可以使用kubeadm来更新证书,1.15版之后增加了证书更新命令kubeadm alpha certs renew <cert_name>,更新证书更加方便了)

具体可以看一下历史提交记录的readme,如下链接:
https://github.com/yuyicai/update-kube-cert/blob/e2193911f807afcf26afec40863127b4f4345d20/README.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants