How to recreate certitifcate for azure hci AKS worker node ?

Hi Demo,

Thank you for reaching out to the Microsoft Q&A platform.

Based on your question description we understand that you want to recreate certificate for azure hci AKS worker node.

Here are some steps you can take to troubleshoot and resolve this issue.

Please renew Kubelet Certificates run the following command to renew all expired certificates, including the one for the Kubelet:

sudo kubeadm alpha certs renew all

Recreate the Bootstrap Kubelet Config   If /etc/kubernetes/bootstrap-kubelet.conf is missing, recreate it with:

sudo kubeadm init phase kubeconfig kubelet

Restart Kubelet after renewing the certificates, restart the Kubelet service to apply the changes.

sudo systemctl restart kubelet

Check the logs to use the following command to confirm the Kubelet is running without any errors.

journalctl -u kubelet

Please find the below documents for you reference:

Configure Certificate Rotation for the Kubelet | Kubernetes

Certificate Management with kubeadm | Kubernetes

If it was helpful, please click "Upvote" on his post to let us know.

Hello @Mahesh Goud Juvvadi ,

sudo kubeadm alpha certs renew all this command is not working
root [ /etc/kubernetes ]# sudo kubeadm alpha certs renew all

Kubeadm experimental sub-commands

Hello Demo

It seems you're using an older version of kubeadm, which doesn't support the alpha certs renew command. The "alpha" phase has been deprecated in recent versions of Kubernetes. Here's how you can proceed:

Please use the latest version of kubeadm and run the following commands to upgrade it:

sudo apt-get update   
sudo apt-get install -y kubeadm

If upgrading is not an option or the command still doesn't work, you can manually delete the expired certificates and let Kubernetes regenerate

sudo rm /var/lib/kubelet/pki/kubelet-client-current.pem   
sudo rm /etc/kubernetes/kubelet.conf
sudo systemctl restart kubelet

After restarting the kubelet, check its status to ensure that it is running correctly:

sudo systemctl status kubelet

If it was helpful, please click "Upvote" on his post to let us know.

Hello Demo,

Just checking in to see if you had a chance to see my response to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.