Renew all certs then restart kubeadm
Renew every control-plane cert; note: restart static pods (mv manifests) for them to reload
kubeadm certs renew all && systemctl restart kubelet
more kubeadm
all 5 commands →
Plan and apply upgrade
kubeadm upgrade plan && kubeadm upgrade apply v1.30.2
Init HA control-plane endpoint
kubeadm init --control-plane-endpoint "<host>:6443" --upload-certs --pod-network-cidr=10.244.0.0/16
Print fresh join command
kubeadm token create --print-join-command
Check cert expiration
kubeadm certs check-expiration