I have deployed 3 node external ETCD database (etcdctl version: 3.4.7
) cluster for my Kubernetes v1.18.6
cluster using etcdadm tool. my certificate is expring in couple of months.
I believe kubeadm alpha certs renew all
command will renew kubernetes certificates. May Know the correct steps to renew external ETCD database cluster certificate?
my cluster certificate details
# kubeadm alpha certs check-expiration
CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY EXTERNALLY MANAGED
admin.conf Jul 20, 2021 14:13 UTC 152d no
apiserver Jul 20, 2021 14:13 UTC 152d ca no
apiserver-kubelet-client Jul 20, 2021 14:13 UTC 152d ca no
controller-manager.conf Jul 20, 2021 14:13 UTC 152d no
front-proxy-client Jul 20, 2021 14:13 UTC 152d front-proxy-ca no
scheduler.conf Jul 20, 2021 14:13 UTC 152d no
CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME EXTERNALLY MANAGED
ca Apr 17, 2030 01:19 UTC 9y no
front-proxy-ca Apr 17, 2030 01:19 UTC 9y no
Master node certificate details
/etc/kubernetes/pki/ca.crt, Apr 17 01:19:52 2030 GMT
/etc/kubernetes/pki/apiserver.crt, Jul 20 14:13:09 2021 GMT
/etc/kubernetes/pki/apiserver-kubelet-client.crt, Jul 20 14:13:10 2021 GMT
/etc/kubernetes/pki/front-proxy-ca.crt, Apr 17 01:19:52 2030 GMT
/etc/kubernetes/pki/front-proxy-client.crt, Jul 20 14:13:10 2021 GMT
/etc/etcd/pki/ca.crt, Apr 17 01:19:35 2030 GMT
/etc/etcd/pki/server.crt, Apr 19 01:19:36 2021 GMT
/etc/etcd/pki/peer.crt, Apr 19 01:19:36 2021 GMT
/etc/etcd/pki/etcdctl-etcd-client.crt, Apr 19 01:19:36 2021 GMT
/etc/etcd/pki/apiserver-etcd-client.crt, Apr 19 01:19:36 2021 GMT
Thanks SR