操作系统信息
虚拟机/物理机,Ubuntu22.04
Kubernetes版本信息
Client Version: version.Info{Major:“1”, Minor:“21”, GitVersion:“v1.21.2”, GitCommit:“092fbfbf53427de67cac1e9fa54aaa09a28371d7”, GitTreeState:“clean”, BuildDate:“2021-06-16T12:59:11Z”, GoVersion:“go1.16.5”, Compiler:“gc”, Platform:“linux/amd64”}
Server Version: version.Info{Major:“1”, Minor:“24”, GitVersion:“v1.24.6”, GitCommit:“08d3594304660f86cfbd17bbb862041b4b75fe6c”, GitTreeState:“clean”, BuildDate:“2023-02-08T17:22:59Z”, GoVersion:“go1.18.6”, Compiler:“gc”, Platform:“linux/amd64”}
WARNING: version difference between client (1.21) and server (1.24) exceeds the supported minor version skew of +/-1
容器运行时
将 docker version
/ crictl version
/ nerdctl version
结果贴在下方
KubeSphere版本信息
v3.3.0。在线安装。在已有K8s上安装。
问题是什么
用户的kubeconfig过期,另一个集群的用户有效期都是10年,这个集群不知道为什么创建的用户的KUBECONFIG有效期只有1年。怎么不删除用户重新创建的前提下更新用户KUBECONFIG的client-certificate-data有效期啊?
用的这个命令查的kubeconfig 有效期: grep ‘client-certificate-data’ KUBECONFIG_PATH | awk ‘{print $2}’ | base64 -d | openssl x509 -text | grep Validity -A2
报错信息:
alertname = KubeClientCertificateExpiration
cluster = host
endpoint = https
instance = xxx.xxx.xxx.xxx:443
job = apiserver
namespace = default
prometheus = kubesphere-monitoring-system/k8s
service = kubernetes
severity = warning
Annotations
message = A client certificate used to authenticate to the apiserver is expiring in less than 7.0 days.