查看k8s secrets证书有效期
1.查看secrets内容
1 | root@tsp-prod-ansible:~# kubectl edit secrets -n istio-system istio-ca-secret #以istio CA证书为例 |
二、解密secrets内容
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 | [root@k8s-master ~]# echo "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMzakNDQWNhZ0F3SUJBZ0lSQUtSZGtRZzlLYnVwa1d1K0dBZTkxRVl3RFFZSktvWklodmNOQVFFTEJRQXcKR0RFV01CUUdBMVVFQ2hNTlkyeDFjM1JsY2k1c2IyTmhiREFlRncweE9URXhNRFV3T0RVM01USmFGdzB5T1RFeApNREl3T0RVM01USmFNQmd4RmpBVUJnTlZCQW9URFdOc2RYTjBaWEl1Ykc5allXd3dnZ0VpTUEwR0NTcUdTSWIzCkRRRUJBUVVBQTRJQkR3QXdnZ0VLQW9JQkFRRFNMOUhOUzl1b2RkWWlwejRYcWZWZ29wRDR4MHpBYnJpbUNXa1QKelcvRXVIaWdiWmdiNGw3NElxVkNnWTlVbDJnQitVcHVyNUQwbHVvaVBQV3JydlQxOGJCdE94VmpzdmxEenJLcgpiNms1VGkrWG5KQXcySUMrbVh5bVZyQyttR2x2MUpWQnJRR2RhcjdpWTVUa3VOWUxYWEVJaWNPZktZRmF3L2lhCjJwTlhScXNVSnJ4akZMQTZNTHFwajY5SEJSOGR6anlNTFR5VzdaZGtxOVROam54OThvSjM0VmhEKzBxTDg0M2QKZ3JDV0xqSTgwSzcvVjllUWNUa1hsaHB6bTBDdmJyOGhRTDFiclZiVnc0UTR6c2grVnNGREs5OTcvN3hBaHJmQQo4V2ZGR2ROTnRWWFcvZjZXRDRpelAwVWpaUnppRXhsYlpYbGZFU2xvMlpvRUphQlZBZ01CQUFHakl6QWhNQTRHCkExVWREd0VCL3dRRUF3SUNCREFQQmdOVkhSTUJBZjhFQlRBREFRSC9NQTBHQ1NxR1NJYjNEUUVCQ3dVQUE0SUIKQVFDd0c3RkxibGluL3JKV0Z0NW9QTWYzN0daRCtiajkvbEpMY3ZYOE9pbW5vYkFTSWxrSVc1S1ZJd3FZaFF3Qgp5b3NhT3VaWTJEclhGRzJTT1pkeDU0V2dDWnQxMERQN2tGaUdJbnJGQXE1bFhRa1JFOGlkOEpJU1B4cS9lOTdiClAwZHJMdFlEazRmQlBjL1pMY3c1aGFwZHI5anpWZDUvcDYwK2s2VDFXaEJHZW9VQ21rVnFBU1IxRFlXZ2xpOW0KTVBsYUlnQUJwWUhTSnp2TnRpV243NjZqbzNuSUwxZDNGdkxuM05QS3dxYkplRXR0Mmc5NGlMOE1VRTR0VWlnRgo1REIyZU8vNWkvZjJPN04yYXdzd3BsN3FwbDRYSlJJc2txOG8xUEVxWXpJeEptOXdqV0dYRjhTN3FIRndmRkFaCnp6bExkWG1GZUFxSXpkUXdqVExlSnJrZAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==" |base64 -d > ca.crt [root@k8s-master ~]# cat istio-ca.crt -----BEGIN CERTIFICATE----- MIIC3jCCAcagAwIBAgIRAKRdkQg9KbupkWu+GAe91EYwDQYJKoZIhvcNAQELBQAw GDEWMBQGA1UEChMNY2x1c3Rlci5sb2NhbDAeFw0xOTExMDUwODU3MTJaFw0yOTEx MDIwODU3MTJaMBgxFjAUBgNVBAoTDWNsdXN0ZXIubG9jYWwwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDSL9HNS9uoddYipz4XqfVgopD4x0zAbrimCWkT zW/EuHigbZgb4l74IqVCgY9Ul2gB+Upur5D0luoiPPWrrvT18bBtOxVjsvlDzrKr b6k5Ti+XnJAw2IC+mXymVrC+mGlv1JVBrQGdar7iY5TkuNYLXXEIicOfKYFaw/ia 2pNXRqsUJrxjFLA6MLqpj69HBR8dzjyMLTyW7Zdkq9TNjnx98oJ34VhD+0qL843d grCWLjI80K7/V9eQcTkXlhpzm0Cvbr8hQL1brVbVw4Q4zsh+VsFDK997/7xAhrfA 8WfFGdNNtVXW/f6WD4izP0UjZRziExlbZXlfESlo2ZoEJaBVAgMBAAGjIzAhMA4G A1UdDwEB/wQEAwICBDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IB AQCwG7FLblin/rJWFt5oPMf37GZD+bj9/lJLcvX8OimnobASIlkIW5KVIwqYhQwB yosaOuZY2DrXFG2SOZdx54WgCZt10DP7kFiGInrFAq5lXQkRE8id8JISPxq/e97b P0drLtYDk4fBPc/ZLcw5hapdr9jzVd5/p60+k6T1WhBGeoUCmkVqASR1DYWgli9m MPlaIgABpYHSJzvNtiWn766jo3nIL1d3FvLn3NPKwqbJeEtt2g94iL8MUE4tUigF 5DB2eO/5i/f2O7N2awswpl7qpl4XJRIskq8o1PEqYzIxJm9wjWGXF8S7qHFwfFAZ zzlLdXmFeAqIzdQwjTLeJrkd -----END CERTIFICATE----- |
三、使用openssl查看
"一劳永逸" 的话,有是有的,而 "一劳永逸" 的事却极少
【推荐】国内首个AI IDE,深度理解中文开发场景,立即下载体验Trae
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步
· winform 绘制太阳,地球,月球 运作规律
· TypeScript + Deepseek 打造卜卦网站:技术与玄学的结合
· AI 智能体引爆开源社区「GitHub 热点速览」
· Manus的开源复刻OpenManus初探
· 写一个简单的SQL生成工具
2017-10-19 Heartbeat+DRBD+MFS高可用