#1.备份pki证书
cd /etc/kubernetes
tar -zcvf pki_bk.tar.gz pki

#2.更新证书
kubeadm certs renew all

#3.检查证书的更新时间
kubeadm certs check-expiration

#4.更新config认证
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

#5.逐个执行，一个好了再开始下一个
kubectl -n kube-system delete pod -l 'component=kube-apiserver'
kubectl -n kube-system delete pod -l 'component=kube-controller-manager'
kubectl -n kube-system delete pod -l 'component=kube-scheduler'
kubectl -n kube-system delete pod -l 'component=etcd'

#6.检查命令是否正常
kubectl get pod -A

参考

https://www.jianshu.com/p/b11e705859c6
https://blog.csdn.net/Beer_Do/article/details/119635278