前提

发现 kubelet 故障
排查后发现证书已经过期
本文用于更新 kubelet 服务器证书

故障

kubelet 无法正常工作

# kubectl cluster-info

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
The connection to the server 10.189.20.40:6443 was refused - did you specify the right host or port?
1
2
3
4

检测容器状态

# docker ps -a | grep api
43c315c4b218        75c7f7112080                                        "kube-apiserver --ad…"   3 minutes ago       Exited (1) 3 minutes ago                       k8s_kube-apiserver_kube-apiserver-ns-yun-020040.vclound.com_kube-system_3065c678a81415e1625697093dd42b9e_42204
1
2

检测容器日志

# docker logs f24975da9d74
忽略其他日志
W0623 10:34:31.493540       1 clientconn.go:1223] grpc: addrConn.createTransport fai
1
2