install root certificates

# convert pem top crt
openssl pkcs12 -export -in homlish_ca.cert.pem -out homlish_ca.cert.crt -nodes

# linux:
sudo cp /nfs/a0/usr3/homlishCA/certs/homlish_ca.cert.pem /usr/local/share/ca-certificates/
update-ca-certificates
# I also had to bounce docker
sudo systemctl restart docker

I got distracted when doing mac, plesse edit me

kubernetes maintenance

I can’t connect to my cluster:

systemctl restart kubelet

kubectl get nodes

NAME STATUS ROLES AGE VERSION
a6 NotReady control-plane 28m v1.25.2

kubectl uncordon a6

phomlish@a6:~/kubernetes$ k get all
The connection to the server 10.11.1.96:6443 was refused – did you specify the right host or port?

 

Where is the etcd certificate?  How to update?
k -n kube-system describe pod/etcd-a6

Continue reading “kubernetes maintenance”