查k8s-v1.18.8证书命令

for crt in $(find /etc/kubernetes/pki/ -name "*.crt"); do echo $crt ;openssl x509 -in $crt -noout -dates; done

/etc/kubernetes/pki/apiserver.crt
notBefore=Nov 12 08:03:13 2020 GMT
notAfter=Nov 12 08:03:13 2021 GMT
/etc/kubernetes/pki/apiserver-kubelet-client.crt
notBefore=Nov 12 08:03:13 2020 GMT
notAfter=Nov 12 08:03:13 2021 GMT
/etc/kubernetes/pki/apiserver-etcd-client.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 12 08:03:16 2021 GMT
/etc/kubernetes/pki/ca.crt
notBefore=Nov 12 08:03:13 2020 GMT
notAfter=Nov 10 08:03:13 2030 GMT
/etc/kubernetes/pki/front-proxy-ca.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 10 08:03:14 2030 GMT
/etc/kubernetes/pki/front-proxy-client.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 12 08:03:14 2021 GMT
/etc/kubernetes/pki/etcd/healthcheck-client.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 12 08:03:15 2021 GMT
/etc/kubernetes/pki/etcd/peer.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 12 08:03:15 2021 GMT
/etc/kubernetes/pki/etcd/ca.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 10 08:03:14 2030 GMT
/etc/kubernetes/pki/etcd/server.crt
notBefore=Nov 12 08:03:14 2020 GMT
notAfter=Nov 12 08:03:14 2021 GMT

修改后

for crt in $(find /etc/kubernetes/pki/ -name "*.crt"); do echo $crt ;openssl x509 -in $crt -noout -dates; done
/etc/kubernetes/pki/apiserver.crt
notBefore=Nov 16 06:18:57 2020 GMT
notAfter=Nov  9 06:18:57 2050 GMT
/etc/kubernetes/pki/apiserver-kubelet-client.crt
notBefore=Nov 16 06:18:57 2020 GMT
notAfter=Nov  9 06:18:57 2050 GMT
/etc/kubernetes/pki/apiserver-etcd-client.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:59 2050 GMT
/etc/kubernetes/pki/ca.crt
notBefore=Nov 16 06:18:57 2020 GMT
notAfter=Nov  9 06:18:57 2050 GMT
/etc/kubernetes/pki/front-proxy-ca.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT
/etc/kubernetes/pki/front-proxy-client.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT
/etc/kubernetes/pki/etcd/healthcheck-client.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:59 2050 GMT
/etc/kubernetes/pki/etcd/peer.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:59 2050 GMT
/etc/kubernetes/pki/etcd/ca.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT
/etc/kubernetes/pki/etcd/server.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT

etcd

for crt in $(find /etc/kubernetes/pki/etcd/ -name "*.crt"); do echo $crt ;openssl x509 -in $crt -noout -dates; done
/etc/kubernetes/pki/etcd/healthcheck-client.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:59 2050 GMT
/etc/kubernetes/pki/etcd/peer.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:59 2050 GMT
/etc/kubernetes/pki/etcd/ca.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT
/etc/kubernetes/pki/etcd/server.crt
notBefore=Nov 16 06:18:58 2020 GMT
notAfter=Nov  9 06:18:58 2050 GMT