Rotation Certificates
Check Items
Check whether the number of certificates on your node is greater than 1000. During an upgrade, certificate files will be processed in batches. An excessive number of certificate files will lead to a slow node upgrade and result in pod eviction from the node.
Solution
Solution 1 (preferred): Reset the node. For details, see Resetting a Node.
Solution 2: Fix the certificate rotation issue on the node.
- Log in to the node and go to the node certificate directory.
cd /opt/cloud/cce/kubernetes/kubelet/pki/
- Delete the residual kubelet-server-* certificate file and certificate soft link file from the node.
find -maxdepth 1 -type f -name 'kubelet-server-*.pem' -delete rm -f ./kubelet-server-current.pem
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot