@@ -117,11 +117,21 @@ cert::check_master_certs_expiration() {
117
117
" ${FRONT_PROXY_CLIENT} "
118
118
)
119
119
120
- kubeconfs=(
121
- " ${CONF_CONTROLLER_MANAGER} "
122
- " ${CONF_SCHEDULER} "
123
- " ${CONF_ADMIN} "
124
- )
120
+ # add support for super_admin.conf, which was added after k8s v1.30.
121
+ if [ -f " ${CONF_SUPER_ADMIN} .conf" ]; then
122
+ kubeconfs=(
123
+ " ${CONF_CONTROLLER_MANAGER} "
124
+ " ${CONF_SCHEDULER} "
125
+ " ${CONF_ADMIN} "
126
+ " ${CONF_SUPER_ADMIN} "
127
+ )
128
+ else
129
+ kubeconfs=(
130
+ " ${CONF_CONTROLLER_MANAGER} "
131
+ " ${CONF_SCHEDULER} "
132
+ " ${CONF_ADMIN} "
133
+ )
134
+ fi
125
135
126
136
printf " %-50s%-30s\n" " CERTIFICATE" " EXPIRES"
127
137
@@ -279,8 +289,15 @@ cert::update_master_cert() {
279
289
log::info " ${GREEN} updated ${BLUE}${CERT_APISERVER_KUBELET_CLIENT} .crt${NC} "
280
290
281
291
# generate kubeconf for controller-manager,scheduler and kubelet
282
- # /etc/kubernetes/controller-manager,scheduler,admin,kubelet.conf
283
- for conf in ${CONF_CONTROLLER_MANAGER} ${CONF_SCHEDULER} ${CONF_ADMIN} ${CONF_KUBELET} ; do
292
+ # /etc/kubernetes/controller-manager,scheduler,admin,kubelet.conf,super_admin(added after k8s v1.30.)
293
+
294
+ if [ -f " ${CONF_SUPER_ADMIN} .conf" ]; then
295
+ conf_list=" ${CONF_CONTROLLER_MANAGER} ${CONF_SCHEDULER} ${CONF_ADMIN} ${CONF_KUBELET} ${CONF_SUPER_ADMIN} "
296
+ else
297
+ conf_list=" ${CONF_CONTROLLER_MANAGER} ${CONF_SCHEDULER} ${CONF_ADMIN} ${CONF_KUBELET} "
298
+ fi
299
+
300
+ for conf in ${conf_list} ; do
284
301
if [[ ${conf##*/ } == " kubelet" ]]; then
285
302
# https://github.com/kubernetes/kubeadm/issues/1753
286
303
set +e
@@ -380,6 +397,7 @@ main() {
380
397
CONF_CONTROLLER_MANAGER=${KUBE_PATH} /controller-manager
381
398
CONF_SCHEDULER=${KUBE_PATH} /scheduler
382
399
CONF_ADMIN=${KUBE_PATH} /admin
400
+ CONF_SUPER_ADMIN=${KUBE_PATH} /super-admin
383
401
CONF_KUBELET=${KUBE_PATH} /kubelet
384
402
# front-proxy
385
403
FRONT_PROXY_CA=${PKI_PATH} /front-proxy-ca
@@ -434,6 +452,7 @@ main() {
434
452
'\033[32m./update-kubeadm-cert.sh all\033[0m' update all etcd certificates, master certificates and kubeconf
435
453
/etc/kubernetes
436
454
├── admin.conf
455
+ ├── super-admin.conf
437
456
├── controller-manager.conf
438
457
├── scheduler.conf
439
458
├── kubelet.conf
@@ -450,6 +469,7 @@ main() {
450
469
'\033[32m./update-kubeadm-cert.sh master\033[0m' update only master certificates and kubeconf
451
470
/etc/kubernetes
452
471
├── admin.conf
472
+ ├── super-admin.conf
453
473
├── controller-manager.conf
454
474
├── scheduler.conf
455
475
├── kubelet.conf
0 commit comments