How to recreate certitifcate for azure hci AKS worker node ?

Demo 20

Hello,
Can anyone provide the steps to generate a certificate for Kubelet?
The AKS HCI worker node is in a "NotReady" state because Kubelet is not running. The Kubelet logs show the following error

:moc-lhylsw0kus0 kubelet[1514068]: E0909 16:25:49.013883 1514068 bootstrap.go:265] part of the existing bootstrap client certificate in /etc/kubernetes/kubelet.conf is expired: 2024-08-30 07:43:22 +0000 UTC Sep 09 16:25:49 moc-lhylsw0kus0 kubelet[1514068]: E0909 16:25:49.013916 1514068 run.go:74] "command failed" err="failed to run Kubelet: unable to load bootstrap kubeconfig: stat /etc/kubernetes/bootstrap-kubelet.conf: no such file or directory"or it will follow same steps as mentioned on Kubernetes documentation .

Mahesh Goud Juvvadi 1,070 Reputation points Microsoft Vendor

2024-09-09T21:51:10.63+00:00
Hi Demo,

Thank you for reaching out to the Microsoft Q&A platform.

Based on your question description we understand that you want to recreate certificate for azure hci AKS worker node.

Here are some steps you can take to troubleshoot and resolve this issue.

Please renew Kubelet Certificates run the following command to renew all expired certificates, including the one for the Kubelet:

sudo kubeadm alpha certs renew all

Recreate the Bootstrap Kubelet Config If /etc/kubernetes/bootstrap-kubelet.conf is missing, recreate it with:

sudo kubeadm init phase kubeconfig kubelet

Restart Kubelet after renewing the certificates, restart the Kubelet service to apply the changes.

sudo systemctl restart kubelet

Check the logs to use the following command to confirm the Kubelet is running without any errors.

journalctl -u kubelet

Please find the below documents for you reference:

Configure Certificate Rotation for the Kubelet | Kubernetes

Certificate Management with kubeadm | Kubernetes

If it was helpful, please click "Upvote" on his post to let us know.
Demo 20 Reputation points

2024-09-10T11:48:55.3766667+00:00

Hello @Mahesh Goud Juvvadi ,

sudo kubeadm alpha certs renew all this command is not working
root [ /etc/kubernetes ]# sudo kubeadm alpha certs renew all

Kubeadm experimental sub-commands
Mahesh Goud Juvvadi 1,070 Reputation points Microsoft Vendor

2024-09-10T19:59:02.99+00:00
Hello Demo

It seems you're using an older version of kubeadm, which doesn't support the alpha certs renew command. The "alpha" phase has been deprecated in recent versions of Kubernetes. Here's how you can proceed:

Please use the latest version of kubeadm and run the following commands to upgrade it:

sudo apt-get update sudo apt-get install -y kubeadm

If upgrading is not an option or the command still doesn't work, you can manually delete the expired certificates and let Kubernetes regenerate

sudo rm /var/lib/kubelet/pki/kubelet-client-current.pem sudo rm /etc/kubernetes/kubelet.conf sudo systemctl restart kubelet

After restarting the kubelet, check its status to ensure that it is running correctly:

sudo systemctl status kubelet

If it was helpful, please click "Upvote" on his post to let us know.
Mahesh Goud Juvvadi 1,070 Reputation points Microsoft Vendor

2024-09-11T19:30:05.46+00:00

Hello Demo,

Just checking in to see if you had a chance to see my response to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.
Mahesh Goud Juvvadi 1,070 Reputation points Microsoft Vendor

2024-09-12T18:58:10.4633333+00:00

Hello Demo,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted comment.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.

Share via

How to recreate certitifcate for azure hci AKS worker node ?

Your answer