kubernetes Unable to connect to the server: x509: certificate has expired or is not yet valid 电脑版发表于：2022/8/31 16:28  >#kubernetes Unable to connect to the server: x509: certificate has expired or is not yet valid [TOC] ## 问题 ```bash # kubectl get pods Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2022-06-28T15:04:21+08:00 is after 2022-06-25T06:11:21 # k8s kube-controller-manager Unable to authenticate the request due to an error ``` tn2>证书过期了 ## 解决 tn2>更新证书。 ```bash # 检测证书过期 kubeadm certs check-expiration # 更新证书 kubeadm certs renew all ``` tn2>复制config ```bash # 先备份config cp -rp $Home/.kube/config $Home/.kube/config.bak # 再替换覆盖 cp -i /etc/kubernetes/admin.conf /root/.kube/config # bash kubectl get pod ``` tn2>如果docker证书也不行，请同步当前时间 ```bash # x509: certificate has expired or is not yet valid， ntpdate cn.pool.ntp.org ``` tn2>如果发现后面deploy不起作用，k8s集群证书更新后没有自动重启对呀的组件执行如下命令后解决。 ```bash docker ps |grep -E 'k8s_kube-apiserver|k8s_kube-controller-manager|k8s_kube-scheduler|k8s_etcd_etcd' | awk -F ' ' '{print $1}' |xargs docker restart ```
