Rancher v2.4.x 轮换证书

适用于单节点Rancher v2.4.x 过期

Posted by Ksd on April 9, 2021

只适用于 rancher v2.4.x版本,且单节点安装

  1. exec 到rancher server
    kubectl --insecure-skip-tls-verify -n kube-system delete secrets k3s-serving
    kubectl --insecure-skip-tls-verify delete secret serving-cert -n cattle-system
    rm -f /var/lib/rancher/k3s/server/tls/dynamic-cert.json
    
  2. 重启rancher-server

  3. 执行以下命令刷新参数
    curl --insecure -sfL https://server-url/v3