自建k8s集群Dashboard证书过期导致浏览器无法打开

注：可使用firefox浏览器可忽略证书直接访问

创建证书
mkdir -p /root/keys
cd /root/keys

openssl genrsa -out dashboard.key 2048
openssl req -new -out dashboard.csr -key dashboard.key -subj '/CN=Eric.zhang'
openssl x509 -req -days 365 -in dashboard.csr -signkey dashboard.key -out dashboard.crt
openssl x509 -in dashboard.crt -text -noout

手动创建secret
kubectl -n kube-system create secret generic kubernetes-dashboard-certs --from-file=dashboard.key --from-file=dashboard.crt 

kubectl -n kube-system get secret | grep dashboard

kubectl -n kube-system describe secret kubernetes-dashboard-certs  

注释掉自带secret,注释掉以下内容
vim kubernetes-dashboard.yaml
# ------------------- Dashboard Secret ------------------- #
#apiVersion: v1
#kind: Secret
#metadata:
#  labels:
#    k8s-app: kubernetes-dashboard
#  name: kubernetes-dashboard-certs
#  namespace: kube-system
#type: Opaque

重新创建dashboard
kubectl apply -f kubernetes-dashboard.yaml

重新获取token,用于浏览器登录
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')

浏览器打开
https://k8s-master-lb:30000