kubectl suddenly fails with a certificate error. Where do you start?
You'll learn to
find expiry, CN and SANs with openssl x509
Recap
- 1Find the paths in the static pod manifests
- 2openssl x509 -text: Subject, Issuer, Not After, SANs
- 3kubeadm certs check-expiration (1 year, CAs 10)
Check yourself
Which line tells you when a certificate expires?
6.7
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.