v2.1.0

What's Changed

• support use the env KUBE_SKIP_ETCD_CERTS to skip etcd certificate update.

# just update kubernetes master certificates, not etcd
export KUBE_SKIP_ETCD_CERTS=true
bash update-kubeadm-cert.sh --cri containerd

v2.0.0

What's Changed

• feat: generate 100 years ca by @yuyicai in #26

For New Clusters

Generate 100 year CA certificates before running kubeadm init
Just generate CA on the first control plane node (master0, which will run kubeadm init)

# master0
# 1. Generate 100 years CA certificates
bash update-kubeadm-cert.sh --action gen-ca

# 2. Initialize your cluster with kubeadm
# kubeadm will use the existing CA certificates generated by the script
kubeadm init [options]

# 3. Update all certificates to 100 years use extended expiration
bash update-kubeadm-cert.sh --cri containerd --days 36500

# 4. Join master1, master2 to the cluster and just run 'bash update-kubeadm-cert.sh --cri containerd --days 36500' on them

v1.1.0: fix k8s v1.29 super_admin.conf

fix k8s v1.29 super_admin.conf #21 @Unknown256

v1.0.0

git clone https://github.com/yuyicai/update-kube-cert.git
cd update-kube-cert
chmod 755 update-kubeadm-cert.sh
./update-kubeadm-cert.sh all --cri docker