root@ubuntu:~/cmd# kubeadm alpha certs check-expiration [check-expiration] Reading configuration from the cluster... [check-expiration] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml' CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY EXTERNALLY MANAGED admin.conf Oct 16, 2021 09:13 UTC 191d no apiserver Oct 16, 2021 09:13 UTC 191d ca no apiserver-etcd-client Oct 16, 2021 09:13 UTC 191d etcd-ca no apiserver-kubelet-client Oct 16, 2021 09:13 UTC 191d ca no controller-manager.conf Oct 16, 2021 09:13 UTC 191d no etcd-healthcheck-client Oct 16, 2021 09:13 UTC 191d etcd-ca no etcd-peer Oct 16, 2021 09:13 UTC 191d etcd-ca no etcd-server Oct 16, 2021 09:13 UTC 191d etcd-ca no front-proxy-client Oct 16, 2021 09:13 UTC 191d front-proxy-ca no scheduler.conf Oct 16, 2021 09:13 UTC 191d no CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME EXTERNALLY MANAGED ca Oct 14, 2030 09:13 UTC 9y no etcd-ca Oct 14, 2030 09:13 UTC 9y no front-proxy-ca Oct 14, 2030 09:13 UTC 9y no
root@ubuntu:~/cmd# ls /etc/kubernetes/pki/ apiserver.crt apiserver-etcd-client.key apiserver-kubelet-client.crt ca.crt ca.srl front-proxy-ca.crt front-proxy-client.crt sa.key apiserver-etcd-client.crt apiserver.key apiserver-kubelet-client.key ca.key etcd front-proxy-ca.key front-proxy-client.key sa.pub root@ubuntu:~/cmd# ls /etc/kubernetes/pki/
https://blog.csdn.net/weixin_30708329/article/details/97545025