1、go 環境部署
到go中文社區https://studygolang.com/下載對應版本的go語言包，配置go環境
cd /usr/local/src
wget https://studygolang.com/dl/golang/go1.14.1.linux-amd64.tar.gz
tar -zxvf go1.14.1.linux-amd64.tar.gz -C /usr/local
vi /etc/profile
export PATH=/usr/local/go/bin:$PATH
source /etc/profile
2、下載k8s源碼
cd /data && git clone https://github.com/kubernetes/kubernetes.git
cd kubernetes && git checkout -b remotes/origin/release-1.15.1 v1.15.1 # 切換到v1.15.1分支
3、修改 Kubeadm 源碼包更新證書策略
vim staging/src/k8s.io/client-go/util/cert/cert.go # kubeadm 1.14 版本之前
vim cmd/kubeadm/app/util/pkiutil/pki_helpers.go # kubeadm 1.14 至今
const duration365d = time.Hour * 24 * 365 * 10
NotAfter: time.Now().Add(duration365d).UTC()
make WHAT=cmd/kubeadm GOFLAGS=-v # 編譯kubeadm
cp _output/bin/kubeadm /root/kubeadm-new
4、更新 kubeadm
# 將 kubeadm 進行替換
cp /usr/bin/kubeadm /usr/bin/kubeadm.old
cp /root/kubeadm-new /usr/bin/kubeadm
chmod a+x /usr/bin/kubeadm
5、更新各節點證書至 Master 節點
cp -r /etc/kubernetes/pki /etc/kubernetes/pki.old
cd /etc/kubernetes/pki
kubeadm alpha certs renew all
openssl x509 -in apiserver.crt -text -noout
6、節點證書更新
scp ca.crt k8s-node1:/etc/kubernetes/pki
scp ca.crt k8s-node2:/etc/kubernetes/pki