【学习k8s时的无忧无虑的日子1.7

设置kubectl自动补全
操作节点：k8s-master

$ yum install bash-completion -y
$ source /usr/share/bash-completion/bash_completion
$ source <(kubectl completion bash)
$ echo “source <(kubectl completion bash)” >> ~/.bashrc

mater 可调度pod
kubectl taint node k8s-master node-role.kubernetes.io/master:NoSchedule-

修改集群证书有效期（修改为10年）

cd /etc/kubernetes/pki

#查看当前证书有效期
$ for i in $(ls *.crt); do echo “===== $i =====”; openssl x509 -in $i -text -noout | grep -A 3 ‘Validity’ ; done

$ mkdir backup_key; cp -rp ./* backup_key/
$ git clone https://github.com/yuyicai/update-kube-cert.git
$ cd update-kube-cert/
$ bash update-kubeadm-cert.sh all

#重建管理服务
$ kubectl -n kube-system delete po kube-apiserver-k8s-master kube-controller-manager-k8s-master kube-scheduler-k8s-master