参考:https://www.jianshu.com/p/2550dba811e7
https://blog.csdn.net/DANTE54/article/details/105297228/
删除当前kubernetes集群下的apiserver的cert和key
rm /etc/kubernetes/pki/apiserver.*
生成新的apiserver的cert和key
参考:
kubeadm init phase certs apiserver --apiserver-advertise-address ${原来的advertise ip} --apiserver-cert-extra-sans ${master的外网ip}
kubeadm init phase certs apiserver \
--apiserver-advertise-address 39.98.189.77 \
--apiserver-cert-extra-sans 172.23.131.89 \
--apiserver-cert-extra-sans lb.kubesphere.local
刷新admin.conf
kubeadm alpha certs renew admin.conf
重启服务
systemctl restart kubelet.service