Can use openssl to check cert expiry

This commit is contained in:
Alok Kumar Singh 2020-11-22 06:58:05 +05:30
parent 01a261cd35
commit 3b2c2314a2
No known key found for this signature in database
GPG Key ID: EBED75B170F22E46
1 changed files with 8 additions and 0 deletions

View File

@ -27,6 +27,14 @@ kubectl get pods -n kube-system -l k8s-app=etcd-manager-main \
* If this outputs `kopeio/etcd-manager` images with tags older than `3.0.20200428`, the cluster is affected.
* If this outputs an image other than `kopeio/etcd-manager`, the cluster may be affected.
* If this does does not output anything or outputs `kopeio/etcd-manager` images with tags >= `3.0.20200428`, the cluster is not affected.
* You can also check the certificate expiry by running `openssl` in the Kubernetes master server(s).
```bash
find /mnt/ -type f -name me.crt -print -exec openssl x509 -enddate -noout -in {} \;
/mnt/master-vol-033b5515e494aa750/pki/YfU68OjV5Z8i-GYYCjhC9w/peers/me.crt
notAfter=Nov 16 11:02:32 2020 GMT
/mnt/master-vol-002ef9578d3186bc5/pki/XE-bdKldogs66KuezA56sg/peers/me.crt
notAfter=Nov 16 11:02:24 2020 GMT
```
## Solution