Обновление сертификатов #

kubeadm init phase certs apiserver --config kubeadm.yaml
kubeadm certs check-expiration
kubeadm certs renew all

Обновление до версии 1.29 #

# На всех нодах
mkdir -p /etc/apt/keyrings/
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.30/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list
apt-mark unhold kubeadm && apt-get update && apt-get install -y kubeadm=1.30.14-1.1 && apt-mark hold kubeadm

# Первая мастер нода
kubeadm upgrade plan v1.30.14
kubeadm upgrade diff v1.30.14
kubeadm upgrade apply v1.30.14

# Остальные мастер ноды
kubeadm upgrade node

# Обновление kubelet на всех нодах
kubeadm upgrade node
apt-mark unhold kubelet && apt-get update && apt-get install -y kubelet=1.30.14-1.1 && apt-mark hold kubelet
systemctl daemon-reload
systemctl restart kubelet