Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,454 questions
How to recreate certitifcate for azure hci AKS worker node ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 21%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Demo
20
Reputation points
Hello,
Can anyone provide the steps to generate a certificate for Kubelet?
The AKS HCI worker node is in a "NotReady" state because Kubelet is not running. The Kubelet logs show the following error
:moc-lhylsw0kus0 kubelet[1514068]: E0909 16:25:49.013883 1514068 bootstrap.go:265] part of the existing bootstrap client certificate in /etc/kubernetes/kubelet.conf is expired: 2024-08-30 07:43:22 +0000 UTC Sep 09 16:25:49 moc-lhylsw0kus0 kubelet[1514068]: E0909 16:25:49.013916 1514068 run.go:74] "command failed" err="failed to run Kubelet: unable to load bootstrap kubeconfig: stat /etc/kubernetes/bootstrap-kubelet.conf: no such file or directory"or it will follow same steps as mentioned on Kubernetes documentation .
Azure Kubernetes Service
Community Center | Not monitored
46,227 questions
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2024-09-09T21:51:10.63+00:00 Hi Demo,
Thank you for reaching out to the Microsoft Q&A platform.
Based on your question description we understand that you want to recreate certificate for azure hci AKS worker node.
Here are some steps you can take to troubleshoot and resolve this issue.
Please renew Kubelet Certificates run the following command to renew all expired certificates, including the one for the Kubelet:
sudo kubeadm alpha certs renew allRecreate the Bootstrap Kubelet Config If
/etc/kubernetes/bootstrap-kubelet.confis missing, recreate it with:sudo kubeadm init phase kubeconfig kubeletRestart Kubelet after renewing the certificates, restart the Kubelet service to apply the changes.
sudo systemctl restart kubeletCheck the logs to use the following command to confirm the Kubelet is running without any errors.
journalctl -u kubeletPlease find the below documents for you reference:
Configure Certificate Rotation for the Kubelet | Kubernetes
Certificate Management with kubeadm | Kubernetes
If it was helpful, please click "Upvote" on his post to let us know.
-
Demo 20 Reputation points
2024-09-10T11:48:55.3766667+00:00 Hello @Anonymous ,
sudo kubeadm alpha certs renew all this command is not working
root [ /etc/kubernetes ]# sudo kubeadm alpha certs renew allKubeadm experimental sub-commands
-
Anonymous
2024-09-10T19:59:02.99+00:00 Hello Demo
It seems you're using an older version of
kubeadm, which doesn't support thealpha certs renewcommand. The "alpha" phase has been deprecated in recent versions of Kubernetes. Here's how you can proceed:Please use the latest version of
kubeadmand run the following commands to upgrade it:sudo apt-get update sudo apt-get install -y kubeadmIf upgrading is not an option or the command still doesn't work, you can manually delete the expired certificates and let Kubernetes regenerate
sudo rm /var/lib/kubelet/pki/kubelet-client-current.pem sudo rm /etc/kubernetes/kubelet.conf sudo systemctl restart kubeletAfter restarting the kubelet, check its status to ensure that it is running correctly:
sudo systemctl status kubeletIf it was helpful, please click "Upvote" on his post to let us know.
-
Anonymous
2024-09-11T19:30:05.46+00:00 Hello Demo,
Just checking in to see if you had a chance to see my response to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.
If it was helpful, please click "Upvote" on his post to let us know.
Thank You.
-
Anonymous
2024-09-12T18:58:10.4633333+00:00 Hello Demo,
I wanted to check if you had the opportunity to review the information which was provided in my previous posted comment.
If it was helpful, please click "Upvote" on his post to let us know.
Thank You.
Sign in to comment
Sign in to answer