๐ก MicroK8s Lightweight K8s: Cert Renewal โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Lightweight K8s: Cert Renewal.
DIRs
- certs (cluster certificates)
/var/snap/microk8s/current/certs/- config (kubeconfig, etc.)
/var/snap/microk8s/current/credentials/
Features
Apply after adding SAN to CA certificate
bash
# ์ธ์ฆ์ ํ
ํ๋ฆฟ ์คํ ํ ๋๋ฉ์ธ ๋๋ IP ์ถ๊ฐ
sudo vi /var/snap/microk8s/current/certs/csr.conf.template
>>>
...
[ alt_names ]
DNS.1 = kubernetes
...
DNS.$n1 = $MY_DOMAIN
IP.1 = 127.0.0.1
...
IP.$n2 = $MY_EXTERNAL_IP
<<<
sudo microk8s refresh-certs
sudo microk8s stop
sudo microk8s startUse updated CA certificate in kubeconfig
bash
#ํ์ค์ถ๋ ฅ ๋ณต์ฌ
sudo cat /var/snap/microk8s/current/certs/ca.crt | base64 | tr -d '\n'
#์๋์ ์
๋ฐ์ดํธ
sudo vi /var/snap/microk8s/current/credentials/client.config
Leave a Reply