k8s查看证书期限

openssl x509 -in kubernetes.pem  -text -noout
openssl x509 -in etcd.pem  -text -noout
openssl x509 -in kubernetes.pem  -text -noout
openssl x509 -in kube-proxy.pem  -text -noout

kubeadmin 下载源码

cd  /data
git clone https://github.com/kubernetes/kubernetes.git

修改kubeadmin 源码包更新证书策略

更新kubeadmin

cp  /usr/bin/kubeadm  /usr/bin/kubeadm.old

备份各个节点pki

cp -r /etc/kubernetes/pki   /etc/kubernetes/pki.old

重新生成证书

kubeadmin alpha certs  renew all  --config=/usr/local/install-k8s/core/kubeadmin-config.yaml