[신한라이프] 인증서 갱신 가이드

작성자 이경미 수정일 2025-03-24 12:58

kubectl-config 파일 삭제 및 생성

kubectl delete cm kubectl-config -n kube-system
kubectl create cm kubectl-config --from-file=/root/.kube/config -n kube-system

kubectl delete cm kubectl-config -n sodaflow
kubectl create cm kubectl-config --from-file=/root/.kube/config -n sodaflow

kubectl-config 가 정상적으로 생성된 것을 확인합니다.

kubectl get cm --all-namespaces |grep kubectl-config
kube-system      kubectl-config                                            1      7m8s     
sodaflow      kubectl-config                                            1      7m8s

Deployment 재생성

kubectl-config 를 참조하는 pod 는 sodaflow-app pod 입니다. 따라서 config 파일 반영을 위해 sodaflow-app pod 를 재시작합니다.

# kubectl-config 를 사용하는 pod 재시작
[root@worker1 ~]# kubectl describe pod -A | grep -B 50 kubectl-config | grep "Name:" | grep -v Secret | grep -v kubectl
Name:         nvidia-gpu-exporter-pktfm
Name:         sodaflow-app-7c4d846cc8-rjkp8
Name:         sodaflow-async-app-7df56dc684-vs6fq
Name:         sodaflow-exporter-5b666bfdc6-xx5d8

[root@worker1 ~]# kubectl  get po -A -owide | grep nvidia-gpu-exporter
kube-system       nvidia-gpu-exporter-pktfm                                   1/1     Running            4          46d     6.2.235.134     worker1   <none>           <none>
[root@worker1 ~]# kubectl  get po -A -owide | grep sodaflow-app
sodaflow          sodaflow-app-7c4d846cc8-rjkp8                               1/1     Running            0          2d17h   6.2.235.140     worker1   <none>           <none>
[root@worker1 ~]# kubectl  get po -A -owide | grep sodaflow-async-app
sodaflow          sodaflow-async-app-7df56dc684-vs6fq                         1/1     Running            8          39d     6.2.189.80      worker2   <none>           <none>
[root@worker1 ~]# kubectl  get po -A -owide | grep sodaflow-exporter
sodaflow          sodaflow-exporter-5b666bfdc6-xx5d8                          1/1     Running            2          30d     6.2.235.190     worker1   <none>           <none>

# node-exporter 재시작
[root@worker1 yamls]# kubectl get po -n monitoring
NAME                                                        READY   STATUS    RESTARTS   AGE
alertmanager-kube-prometheus-stack-alertmanager-0           2/2     Running   7          44d
custom-grafana-5469bcf486-v6hwt                             1/1     Running   0          18h
kube-prometheus-stack-grafana-64d797fdd5-s69vv              2/2     Running   4          100d
kube-prometheus-stack-kube-state-metrics-7cfcfb9669-7bw74   1/1     Running   5          100d
kube-prometheus-stack-operator-59fcd9bb7c-h8ltl             1/1     Running   3          101d
kube-prometheus-stack-prometheus-node-exporter-jg6gp        1/1     Running   2          96d
kube-prometheus-stack-prometheus-node-exporter-nmljt        1/1     Running   2          39d
kube-prometheus-stack-prometheus-node-exporter-vnfsh        1/1     Running   6          96d
prometheus-kube-prometheus-stack-prometheus-0               2/2     Running   7          44d

[root@worker1 ~]# kubectl delete pod -n kube-system nvidia-gpu-exporter-pktfm         
[root@worker1 ~]# kubectl delete pod -n sodaflow sodaflow-app-7c4d846cc8-rjkp8
[root@worker1 ~]# kubectl delete pod -n sodafow sodaflow-async-app-7df56dc684-vs6fq 
[root@worker1 ~]# kubectl delete pod -n sodaflow sodaflow-exporter-5b666bfdc6-xx5d8 
[root@worker1 ~]# kubectl delete pod -n monitoring kube-prometheus-stack-prometheus-node-exporter-xxxxx