whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document kubelet client certificate recovery

Browse Source 
break long lines

simplify wording (suggested by neolit123)

phrasing error/typo

don't mention creating a new kuebadm config file, not really relevant here

remove unnecessary stop from kubelet cert troubleshoot

minor phrasing improvement: *the* kublet

make the steps for fixing kubelet certs separate from other troubleshooting suggestions

move kubelet cert troubleshooting to a better place

improve note wording and add link

add missing dot

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>

add missing dot

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>

remove steps not related to the issue

Make instructions work on worker nodes too

Co-authored-by: Lubomir I. Ivanov <neolit123@gmail.com>
This commit is contained in:
Antoine Poliakov
2021-06-07 16:09:48 +02:00
parent 55f1b0a4b9
commit 58fc28ecb8
2 changed files with 24 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/tasks/administer-cluster/kubeadm/kubeadm-certs.md
+5 -1
View File
@@ -85,7 +85,11 @@ Additionally, kubeadm informs the user if the certificate is externally managed;
{{< /warning >}}
{{< note >}}
`kubelet.conf` is not included in the list above because kubeadm configures kubelet for automatic certificate renewal.
`kubelet.conf` is not included in the list above because kubeadm configures kubelet
for [automatic certificate renewal](/docs/tasks/tls/certificate-rotation/)
with rotatable certificates under `/var/lib/kubelet/pki`.
To repair an expired kubelet client certificate see
[Kubelet client certificate rotation fails](/docs/setup/production-environment/tools/kubeadm/troubleshooting-kubeadm/#kubelet-client-cert).
{{< /note >}}
{{< warning >}}